[07/10/15-05:25:43] *********************************************
[07/10/15-05:25:43] Network Inspection System service starting.
[07/10/15-05:25:43] Version: 4.8.10240.16384
[07/10/15-05:25:43] *********************************************
[07/10/15-05:25:43] Service started by NisIpsPlugin
[07/10/15-05:25:43] Service started
[07/10/15-05:25:43] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default
[07/10/15-05:25:43] Win8+: overriding fZeroDayEnabled to FALSE
[07/10/15-05:25:43] Signature update - files received: Engine version: 2.1.11502.0; Signature version = 114.1.0.0
[07/10/15-05:25:44] --Signature list start--
[07/10/15-05:25:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[07/10/15-05:25:44] --Signature list end--
[07/10/15-05:25:44] Signatures: Total: 90;  Enabled: 88
[07/10/15-05:25:44] Active signature breakdown: BM: 88; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[07/10/15-05:25:44] New engine version=2.1.11502.0; New signature version=114.1.0.0
[07/10/15-05:25:44] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[07/10/15-05:25:44] At least one signature is active
[07/10/15-05:25:44] Connecting to the driver
[07/10/15-05:25:44] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6
[07/10/15-05:25:44] Load Definitions completed successfully.
[04/13/16-08:50:05] *********************************************
[04/13/16-08:50:05] Network Inspection System service starting.
[04/13/16-08:50:05] Version: 4.8.10240.16384
[04/13/16-08:50:05] *********************************************
[04/13/16-08:50:05] Service started manually or by SCM crash recovery
[04/13/16-08:50:05] Service started
[04/13/16-08:51:09] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E00B643F-2E64-DB24-3CED-B469A0D505E1}
[04/13/16-08:51:09] Win8+: overriding fZeroDayEnabled to FALSE
[04/13/16-08:51:09] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.42.0.0
[04/13/16-08:51:10] --Signature list start--
[04/13/16-08:51:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-08:51:10] --Signature list end--
[04/13/16-08:51:10] Signatures: Total: 120;  Enabled: 118
[04/13/16-08:51:10] Active signature breakdown: BM: 118; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/13/16-08:51:10] New engine version=2.1.11804.0; New signature version=115.42.0.0
[04/13/16-08:51:10] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/13/16-08:51:10] At least one signature is active
[04/13/16-08:51:10] Connecting to the driver
[04/13/16-08:51:10] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/13/16-08:51:10] Load Definitions completed successfully.
[04/13/16-14:21:41] *********************************************
[04/13/16-14:21:42] Network Inspection System service starting.
[04/13/16-14:21:42] Version: 4.8.10240.16384
[04/13/16-14:21:42] *********************************************
[04/13/16-14:21:42] Service started by NisIpsPlugin
[04/13/16-14:21:42] Service started
[04/13/16-14:21:42] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{50A261FC-0804-4424-910E-9152334B7AB1}
[04/13/16-14:21:42] Win8+: overriding fZeroDayEnabled to FALSE
[04/13/16-14:21:43] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/13/16-14:21:45] --Signature list start--
[04/13/16-14:21:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/13/16-14:21:45] --Signature list end--
[04/13/16-14:21:45] Signatures: Total: 122;  Enabled: 120
[04/13/16-14:21:45] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/13/16-14:21:45] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/13/16-14:21:45] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/13/16-14:21:45] At least one signature is active
[04/13/16-14:21:45] Connecting to the driver
[04/13/16-14:21:45] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/13/16-14:21:45] Load Definitions completed successfully.
[04/13/16-16:40:04] Parse error - Cancel Inspection
[04/13/16-16:40:04] SpyNet report was successfully sent
[04/13/16-16:40:32] Parse error - Cancel Inspection
[04/13/16-16:40:32] SpyNet report was successfully sent
[04/13/16-16:46:46] Parse error - Cancel Inspection
[04/13/16-16:46:46] SpyNet report was successfully sent
[04/13/16-16:46:46] Parse error - Cancel Inspection
[04/13/16-16:46:46] SpyNet report was successfully sent
[04/13/16-16:46:46] Parse error - Cancel Inspection
[04/13/16-16:46:46] Parse error - Cancel Inspection
[04/13/16-16:46:46] SpyNet report was successfully sent
[04/13/16-16:46:46] SpyNet report was successfully sent
[04/13/16-17:07:50] Parse error - Cancel Inspection
[04/13/16-17:07:50] Parse error - Cancel Inspection
[04/13/16-17:07:50] SpyNet report was successfully sent
[04/13/16-17:07:50] SpyNet report was successfully sent
[04/13/16-18:44:28] Parse error - Cancel Inspection
[04/13/16-18:44:28] Parse error - Cancel Inspection
[04/13/16-18:44:28] SpyNet report was successfully sent
[04/13/16-18:44:28] SpyNet report was successfully sent
[04/13/16-18:44:30] Parse error - Cancel Inspection
[04/13/16-18:44:30] SpyNet report was successfully sent
[04/13/16-18:44:30] Parse error - Cancel Inspection
[04/13/16-18:44:30] SpyNet report was successfully sent
[04/13/16-18:44:31] Parse error - Cancel Inspection
[04/13/16-18:44:31] Parse error - Cancel Inspection
[04/13/16-18:44:31] SpyNet report was successfully sent
[04/13/16-18:44:31] SpyNet report was successfully sent
[04/13/16-18:50:37] Parse error - Cancel Inspection
[04/13/16-18:50:37] SpyNet report was successfully sent
[04/13/16-18:50:37] Parse error - Cancel Inspection
[04/13/16-18:50:37] Parse error - Cancel Inspection
[04/13/16-18:50:37] SpyNet report was successfully sent
[04/13/16-18:50:37] SpyNet report was successfully sent
[04/13/16-18:50:37] Parse error - Cancel Inspection
[04/13/16-18:50:37] SpyNet report was successfully sent
[04/13/16-18:50:54] Parse error - Cancel Inspection
[04/13/16-18:50:54] SpyNet report was successfully sent
[04/13/16-18:50:54] Parse error - Cancel Inspection
[04/13/16-18:50:54] SpyNet report was successfully sent
[04/13/16-18:52:52] Parse error - Cancel Inspection
[04/13/16-18:52:52] SpyNet report was successfully sent
[04/13/16-18:52:52] Parse error - Cancel Inspection
[04/13/16-18:52:52] SpyNet report was successfully sent
[04/13/16-18:53:10] Parse error - Cancel Inspection
[04/13/16-18:53:10] SpyNet report was successfully sent
[04/13/16-18:53:12] Parse error - Cancel Inspection
[04/13/16-18:53:12] SpyNet report was successfully sent
[04/14/16-03:29:56] Parse error - Cancel Inspection
[04/14/16-03:29:56] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:29:57] Parse error - Cancel Inspection
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:00] SpyNet report was successfully sent
[04/14/16-03:30:04] Parse error - Cancel Inspection
[04/14/16-03:30:04] SpyNet report was successfully sent
[04/14/16-03:30:04] Parse error - Cancel Inspection
[04/14/16-03:30:04] SpyNet report was successfully sent
[04/14/16-03:38:44] *********************************************
[04/14/16-03:38:45] Network Inspection System service starting.
[04/14/16-03:38:45] Version: 4.8.10240.16384
[04/14/16-03:38:45] *********************************************
[04/14/16-03:38:45] Service started by NisIpsPlugin
[04/14/16-03:38:45] Service started
[04/14/16-03:38:45] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{50A261FC-0804-4424-910E-9152334B7AB1}
[04/14/16-03:38:45] Win8+: overriding fZeroDayEnabled to FALSE
[04/14/16-03:38:45] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-03:38:46] --Signature list start--
[04/14/16-03:38:46] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:38:46] --Signature list end--
[04/14/16-03:38:46] Signatures: Total: 122;  Enabled: 120
[04/14/16-03:38:46] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-03:38:46] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-03:38:46] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/14/16-03:38:46] At least one signature is active
[04/14/16-03:38:46] Connecting to the driver
[04/14/16-03:38:46] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/14/16-03:38:46] Load Definitions completed successfully.
[04/14/16-03:46:06] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-03:46:07] --Signature list start--
[04/14/16-03:46:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-03:46:07] --Signature list end--
[04/14/16-03:46:07] Signatures: Total: 122;  Enabled: 120
[04/14/16-03:46:07] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-03:46:07] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-07:07:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-07:07:51] --Signature list start--
[04/14/16-07:07:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-07:07:51] --Signature list end--
[04/14/16-07:07:51] Signatures: Total: 122;  Enabled: 120
[04/14/16-07:07:51] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-07:07:51] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-10:22:12] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-10:22:13] --Signature list start--
[04/14/16-10:22:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:22:13] --Signature list end--
[04/14/16-10:22:13] Signatures: Total: 122;  Enabled: 120
[04/14/16-10:22:13] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-10:22:13] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-10:27:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-10:27:17] --Signature list start--
[04/14/16-10:27:17] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:27:17] --Signature list end--
[04/14/16-10:27:17] Signatures: Total: 122;  Enabled: 120
[04/14/16-10:27:17] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-10:27:17] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-10:37:14] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-10:37:14] --Signature list start--
[04/14/16-10:37:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-10:37:14] --Signature list end--
[04/14/16-10:37:14] Signatures: Total: 122;  Enabled: 120
[04/14/16-10:37:14] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-10:37:14] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-13:44:54] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-13:44:54] --Signature list start--
[04/14/16-13:44:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-13:44:54] --Signature list end--
[04/14/16-13:44:54] Signatures: Total: 122;  Enabled: 120
[04/14/16-13:44:54] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-13:44:54] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-16:52:28] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-16:52:29] --Signature list start--
[04/14/16-16:52:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-16:52:29] --Signature list end--
[04/14/16-16:52:29] Signatures: Total: 122;  Enabled: 120
[04/14/16-16:52:29] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-16:52:29] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-17:10:49] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-17:10:50] --Signature list start--
[04/14/16-17:10:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:10:50] --Signature list end--
[04/14/16-17:10:50] Signatures: Total: 122;  Enabled: 120
[04/14/16-17:10:50] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-17:10:50] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/14/16-17:53:52] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/14/16-17:53:52] --Signature list start--
[04/14/16-17:53:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/14/16-17:53:52] --Signature list end--
[04/14/16-17:53:52] Signatures: Total: 122;  Enabled: 120
[04/14/16-17:53:52] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/14/16-17:53:52] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/16/16-12:05:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.44.0.0
[04/16/16-12:05:42] --Signature list start--
[04/16/16-12:05:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:05:42] --Signature list end--
[04/16/16-12:05:42] Signatures: Total: 122;  Enabled: 120
[04/16/16-12:05:42] Active signature breakdown: BM: 120; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/16/16-12:05:42] New engine version=2.1.11804.0; New signature version=115.44.0.0
[04/16/16-12:17:51] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7042DC4B-E11F-4841-B030-F317D9E92263}
[04/16/16-12:17:51] Win8+: overriding fZeroDayEnabled to FALSE
[04/16/16-12:17:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/16/16-12:17:51] --Signature list start--
[04/16/16-12:17:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/16/16-12:17:51] --Signature list end--
[04/16/16-12:17:51] Signatures: Total: 138;  Enabled: 136
[04/16/16-12:17:51] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/16/16-12:17:51] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/16/16-12:17:51] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/16/16-12:17:51] At least one signature is active
[04/16/16-12:17:51] Already connected to the driver
[04/16/16-12:17:51] Load Definitions completed successfully.
[04/18/16-11:18:03] *********************************************
[04/18/16-11:18:03] Network Inspection System service starting.
[04/18/16-11:18:03] Version: 4.8.10240.16384
[04/18/16-11:18:03] *********************************************
[04/18/16-11:18:03] Service started by NisIpsPlugin
[04/18/16-11:18:03] Service started
[04/18/16-11:18:39] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7042DC4B-E11F-4841-B030-F317D9E92263}
[04/18/16-11:18:39] Win8+: overriding fZeroDayEnabled to FALSE
[04/18/16-11:18:39] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-11:18:40] --Signature list start--
[04/18/16-11:18:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:18:40] --Signature list end--
[04/18/16-11:18:40] Signatures: Total: 138;  Enabled: 136
[04/18/16-11:18:40] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-11:18:40] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-11:18:40] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/18/16-11:18:40] At least one signature is active
[04/18/16-11:18:40] Connecting to the driver
[04/18/16-11:18:40] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/18/16-11:18:40] Load Definitions completed successfully.
[04/18/16-11:35:18] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-11:35:18] --Signature list start--
[04/18/16-11:35:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:35:18] --Signature list end--
[04/18/16-11:35:18] Signatures: Total: 138;  Enabled: 136
[04/18/16-11:35:18] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-11:35:18] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-11:40:24] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-11:40:24] --Signature list start--
[04/18/16-11:40:24] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:40:24] --Signature list end--
[04/18/16-11:40:24] Signatures: Total: 138;  Enabled: 136
[04/18/16-11:40:24] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-11:40:24] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-11:50:11] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-11:50:11] --Signature list start--
[04/18/16-11:50:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:50:11] --Signature list end--
[04/18/16-11:50:11] Signatures: Total: 138;  Enabled: 136
[04/18/16-11:50:11] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-11:50:11] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-11:57:54] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-11:57:54] --Signature list start--
[04/18/16-11:57:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-11:57:54] --Signature list end--
[04/18/16-11:57:54] Signatures: Total: 138;  Enabled: 136
[04/18/16-11:57:54] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-11:57:54] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-12:13:06] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-12:13:06] --Signature list start--
[04/18/16-12:13:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:13:06] --Signature list end--
[04/18/16-12:13:06] Signatures: Total: 138;  Enabled: 136
[04/18/16-12:13:06] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-12:13:06] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-12:20:11] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-12:20:11] --Signature list start--
[04/18/16-12:20:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:20:11] --Signature list end--
[04/18/16-12:20:11] Signatures: Total: 138;  Enabled: 136
[04/18/16-12:20:11] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-12:20:11] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-12:32:31] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-12:32:31] --Signature list start--
[04/18/16-12:32:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:32:31] --Signature list end--
[04/18/16-12:32:31] Signatures: Total: 138;  Enabled: 136
[04/18/16-12:32:31] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-12:32:31] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-12:40:54] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-12:40:54] --Signature list start--
[04/18/16-12:40:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:40:54] --Signature list end--
[04/18/16-12:40:54] Signatures: Total: 138;  Enabled: 136
[04/18/16-12:40:54] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-12:40:54] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-12:49:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-12:49:40] --Signature list start--
[04/18/16-12:49:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-12:49:40] --Signature list end--
[04/18/16-12:49:40] Signatures: Total: 138;  Enabled: 136
[04/18/16-12:49:40] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-12:49:40] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-13:01:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-13:01:04] --Signature list start--
[04/18/16-13:01:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:01:04] --Signature list end--
[04/18/16-13:01:04] Signatures: Total: 138;  Enabled: 136
[04/18/16-13:01:04] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-13:01:04] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-13:12:21] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-13:12:21] --Signature list start--
[04/18/16-13:12:21] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:12:21] --Signature list end--
[04/18/16-13:12:21] Signatures: Total: 138;  Enabled: 136
[04/18/16-13:12:21] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-13:12:21] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-13:20:13] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-13:20:14] --Signature list start--
[04/18/16-13:20:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:20:14] --Signature list end--
[04/18/16-13:20:14] Signatures: Total: 138;  Enabled: 136
[04/18/16-13:20:14] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-13:20:14] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-13:35:36] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-13:35:36] --Signature list start--
[04/18/16-13:35:36] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:35:36] --Signature list end--
[04/18/16-13:35:36] Signatures: Total: 138;  Enabled: 136
[04/18/16-13:35:36] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-13:35:36] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-13:41:26] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-13:41:26] --Signature list start--
[04/18/16-13:41:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:41:26] --Signature list end--
[04/18/16-13:41:26] Signatures: Total: 138;  Enabled: 136
[04/18/16-13:41:26] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-13:41:26] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-13:50:13] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-13:50:14] --Signature list start--
[04/18/16-13:50:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-13:50:14] --Signature list end--
[04/18/16-13:50:14] Signatures: Total: 138;  Enabled: 136
[04/18/16-13:50:14] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-13:50:14] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-14:01:37] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-14:01:37] --Signature list start--
[04/18/16-14:01:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-14:01:37] --Signature list end--
[04/18/16-14:01:37] Signatures: Total: 138;  Enabled: 136
[04/18/16-14:01:37] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-14:01:37] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-15:42:34] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-15:42:34] --Signature list start--
[04/18/16-15:42:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-15:42:34] --Signature list end--
[04/18/16-15:42:34] Signatures: Total: 138;  Enabled: 136
[04/18/16-15:42:34] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-15:42:34] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-16:00:39] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-16:00:39] --Signature list start--
[04/18/16-16:00:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:00:39] --Signature list end--
[04/18/16-16:00:39] Signatures: Total: 138;  Enabled: 136
[04/18/16-16:00:39] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-16:00:39] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-16:06:43] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-16:06:43] --Signature list start--
[04/18/16-16:06:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-16:06:43] --Signature list end--
[04/18/16-16:06:43] Signatures: Total: 138;  Enabled: 136
[04/18/16-16:06:43] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-16:06:43] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-17:13:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-17:13:42] --Signature list start--
[04/18/16-17:13:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:13:42] --Signature list end--
[04/18/16-17:13:42] Signatures: Total: 138;  Enabled: 136
[04/18/16-17:13:42] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-17:13:42] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-17:26:10] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-17:26:10] --Signature list start--
[04/18/16-17:26:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:26:10] --Signature list end--
[04/18/16-17:26:10] Signatures: Total: 138;  Enabled: 136
[04/18/16-17:26:10] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-17:26:10] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-17:44:29] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-17:44:30] --Signature list start--
[04/18/16-17:44:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-17:44:30] --Signature list end--
[04/18/16-17:44:30] Signatures: Total: 138;  Enabled: 136
[04/18/16-17:44:30] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-17:44:30] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-18:24:18] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-18:24:19] --Signature list start--
[04/18/16-18:24:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:24:19] --Signature list end--
[04/18/16-18:24:19] Signatures: Total: 138;  Enabled: 136
[04/18/16-18:24:19] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-18:24:19] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-18:41:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-18:41:51] --Signature list start--
[04/18/16-18:41:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-18:41:51] --Signature list end--
[04/18/16-18:41:51] Signatures: Total: 138;  Enabled: 136
[04/18/16-18:41:51] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-18:41:51] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-19:02:28] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-19:02:28] --Signature list start--
[04/18/16-19:02:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:02:28] --Signature list end--
[04/18/16-19:02:28] Signatures: Total: 138;  Enabled: 136
[04/18/16-19:02:28] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-19:02:28] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/18/16-19:13:39] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/18/16-19:13:39] --Signature list start--
[04/18/16-19:13:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/18/16-19:13:39] --Signature list end--
[04/18/16-19:13:39] Signatures: Total: 138;  Enabled: 136
[04/18/16-19:13:39] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/18/16-19:13:39] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-10:02:58] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-10:02:58] --Signature list start--
[04/19/16-10:02:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:02:58] --Signature list end--
[04/19/16-10:02:58] Signatures: Total: 138;  Enabled: 136
[04/19/16-10:02:58] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-10:02:58] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-10:27:38] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-10:27:39] --Signature list start--
[04/19/16-10:27:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:27:39] --Signature list end--
[04/19/16-10:27:39] Signatures: Total: 138;  Enabled: 136
[04/19/16-10:27:39] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-10:27:39] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-10:36:21] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-10:36:21] --Signature list start--
[04/19/16-10:36:21] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:36:21] --Signature list end--
[04/19/16-10:36:21] Signatures: Total: 138;  Enabled: 136
[04/19/16-10:36:21] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-10:36:21] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-10:54:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-10:54:40] --Signature list start--
[04/19/16-10:54:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-10:54:40] --Signature list end--
[04/19/16-10:54:40] Signatures: Total: 138;  Enabled: 136
[04/19/16-10:54:40] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-10:54:40] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-10:54:45] Parse error - Cancel Inspection
[04/19/16-10:54:45] SpyNet report was successfully sent
[04/19/16-10:59:50] Parse error - Cancel Inspection
[04/19/16-10:59:50] SpyNet report was successfully sent
[04/19/16-11:12:29] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-11:12:29] --Signature list start--
[04/19/16-11:12:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:12:29] --Signature list end--
[04/19/16-11:12:29] Signatures: Total: 138;  Enabled: 136
[04/19/16-11:12:29] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-11:12:29] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-11:25:28] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-11:25:28] --Signature list start--
[04/19/16-11:25:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:25:28] --Signature list end--
[04/19/16-11:25:28] Signatures: Total: 138;  Enabled: 136
[04/19/16-11:25:28] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-11:25:28] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-11:47:26] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-11:47:26] --Signature list start--
[04/19/16-11:47:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-11:47:26] --Signature list end--
[04/19/16-11:47:26] Signatures: Total: 138;  Enabled: 136
[04/19/16-11:47:26] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-11:47:26] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/19/16-17:33:17] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/19/16-17:33:18] --Signature list start--
[04/19/16-17:33:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/19/16-17:33:18] --Signature list end--
[04/19/16-17:33:18] Signatures: Total: 138;  Enabled: 136
[04/19/16-17:33:18] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/19/16-17:33:18] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/20/16-10:47:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/20/16-10:47:41] --Signature list start--
[04/20/16-10:47:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-10:47:41] --Signature list end--
[04/20/16-10:47:41] Signatures: Total: 138;  Enabled: 136
[04/20/16-10:47:41] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/20/16-10:47:41] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/20/16-11:48:49] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/20/16-11:48:49] --Signature list start--
[04/20/16-11:48:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-11:48:49] --Signature list end--
[04/20/16-11:48:49] Signatures: Total: 138;  Enabled: 136
[04/20/16-11:48:49] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/20/16-11:48:49] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/20/16-12:03:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/20/16-12:03:51] --Signature list start--
[04/20/16-12:03:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/20/16-12:03:51] --Signature list end--
[04/20/16-12:03:51] Signatures: Total: 138;  Enabled: 136
[04/20/16-12:03:51] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/20/16-12:03:51] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/22/16-15:43:09] *********************************************
[04/22/16-15:43:09] Network Inspection System service starting.
[04/22/16-15:43:09] Version: 4.8.10240.16384
[04/22/16-15:43:09] *********************************************
[04/22/16-15:43:09] Service started by NisIpsPlugin
[04/22/16-15:43:09] Service started
[04/22/16-15:44:05] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{7042DC4B-E11F-4841-B030-F317D9E92263}
[04/22/16-15:44:05] Win8+: overriding fZeroDayEnabled to FALSE
[04/22/16-15:44:06] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/22/16-15:44:06] --Signature list start--
[04/22/16-15:44:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:44:06] --Signature list end--
[04/22/16-15:44:06] Signatures: Total: 138;  Enabled: 136
[04/22/16-15:44:06] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/22/16-15:44:06] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/22/16-15:44:06] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/22/16-15:44:06] At least one signature is active
[04/22/16-15:44:06] Connecting to the driver
[04/22/16-15:44:06] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/22/16-15:44:06] Load Definitions completed successfully.
[04/22/16-15:55:53] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/22/16-15:55:53] --Signature list start--
[04/22/16-15:55:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-15:55:53] --Signature list end--
[04/22/16-15:55:53] Signatures: Total: 138;  Enabled: 136
[04/22/16-15:55:53] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/22/16-15:55:53] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/22/16-16:11:49] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/22/16-16:11:49] --Signature list start--
[04/22/16-16:11:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:11:49] --Signature list end--
[04/22/16-16:11:49] Signatures: Total: 138;  Enabled: 136
[04/22/16-16:11:49] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/22/16-16:11:49] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/22/16-16:18:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/22/16-16:18:16] --Signature list start--
[04/22/16-16:18:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:18:16] --Signature list end--
[04/22/16-16:18:16] Signatures: Total: 138;  Enabled: 136
[04/22/16-16:18:16] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/22/16-16:18:16] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/22/16-16:28:59] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/22/16-16:28:59] --Signature list start--
[04/22/16-16:28:59] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/22/16-16:28:59] --Signature list end--
[04/22/16-16:28:59] Signatures: Total: 138;  Enabled: 136
[04/22/16-16:28:59] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/22/16-16:28:59] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/22/16-16:31:04] Parse error - Cancel Inspection
[04/22/16-16:31:04] SpyNet report was successfully sent
[04/22/16-16:31:11] Parse error - Cancel Inspection
[04/22/16-16:31:11] SpyNet report was successfully sent
[04/22/16-16:31:13] Parse error - Cancel Inspection
[04/22/16-16:31:13] SpyNet report was successfully sent
[04/22/16-16:31:23] Parse error - Cancel Inspection
[04/22/16-16:31:23] SpyNet report was successfully sent
[04/22/16-16:31:23] Parse error - Cancel Inspection
[04/22/16-16:31:23] SpyNet report was successfully sent
[04/22/16-16:31:30] Parse error - Cancel Inspection
[04/22/16-16:31:30] SpyNet report was successfully sent
[04/22/16-16:31:31] Parse error - Cancel Inspection
[04/22/16-16:31:31] SpyNet report was successfully sent
[04/22/16-16:31:31] Parse error - Cancel Inspection
[04/22/16-16:31:31] SpyNet report was successfully sent
[04/23/16-00:41:26] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.55.0.0
[04/23/16-00:41:26] --Signature list start--
[04/23/16-00:41:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/23/16-00:41:26] --Signature list end--
[04/23/16-00:41:26] Signatures: Total: 138;  Enabled: 136
[04/23/16-00:41:26] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/23/16-00:41:26] New engine version=2.1.11804.0; New signature version=115.55.0.0
[04/23/16-00:41:26] Parse error - Cancel Inspection
[04/23/16-00:41:26] Parse error - Cancel Inspection
[04/23/16-00:41:26] SpyNet report was successfully sent
[04/23/16-00:41:26] SpyNet report was successfully sent
[04/23/16-00:46:59] Service stopping
[04/23/16-00:46:59] Disengaging the driver
[04/23/16-00:46:59] Service stopped
[04/24/16-22:18:19] *********************************************
[04/24/16-22:18:19] Network Inspection System service starting.
[04/24/16-22:18:19] Version: 4.8.10240.16384
[04/24/16-22:18:19] *********************************************
[04/24/16-22:18:19] Service started by NisIpsPlugin
[04/24/16-22:18:19] Service started
[04/24/16-22:18:20] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EC99F753-EF3D-40F7-9638-257FACA6E601}
[04/24/16-22:18:20] Win8+: overriding fZeroDayEnabled to FALSE
[04/24/16-22:18:20] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/24/16-22:18:23] --Signature list start--
[04/24/16-22:18:23] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-22:18:23] --Signature list end--
[04/24/16-22:18:23] Signatures: Total: 138;  Enabled: 136
[04/24/16-22:18:23] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/24/16-22:18:23] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/24/16-22:18:23] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/24/16-22:18:23] At least one signature is active
[04/24/16-22:18:23] Connecting to the driver
[04/24/16-22:18:23] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/24/16-22:18:23] Load Definitions completed successfully.
[04/24/16-22:21:25] Parse error - Cancel Inspection
[04/24/16-23:35:02] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/24/16-23:35:04] --Signature list start--
[04/24/16-23:35:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/24/16-23:35:04] --Signature list end--
[04/24/16-23:35:04] Signatures: Total: 138;  Enabled: 136
[04/24/16-23:35:04] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/24/16-23:35:04] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-00:05:07] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-00:05:07] --Signature list start--
[04/25/16-00:05:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:05:07] --Signature list end--
[04/25/16-00:05:07] Signatures: Total: 138;  Enabled: 136
[04/25/16-00:05:07] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-00:05:07] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-00:20:09] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-00:20:09] --Signature list start--
[04/25/16-00:20:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:20:09] --Signature list end--
[04/25/16-00:20:09] Signatures: Total: 138;  Enabled: 136
[04/25/16-00:20:09] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-00:20:09] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-00:50:13] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-00:50:13] --Signature list start--
[04/25/16-00:50:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-00:50:13] --Signature list end--
[04/25/16-00:50:13] Signatures: Total: 138;  Enabled: 136
[04/25/16-00:50:13] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-00:50:13] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-01:05:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-01:05:15] --Signature list start--
[04/25/16-01:05:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:05:15] --Signature list end--
[04/25/16-01:05:15] Signatures: Total: 138;  Enabled: 136
[04/25/16-01:05:15] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-01:05:15] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-01:20:17] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-01:20:17] --Signature list start--
[04/25/16-01:20:17] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-01:20:17] --Signature list end--
[04/25/16-01:20:17] Signatures: Total: 138;  Enabled: 136
[04/25/16-01:20:17] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-01:20:17] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-08:04:38] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-08:04:39] --Signature list start--
[04/25/16-08:04:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:04:39] --Signature list end--
[04/25/16-08:04:39] Signatures: Total: 138;  Enabled: 136
[04/25/16-08:04:39] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-08:04:39] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-08:22:46] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-08:22:47] --Signature list start--
[04/25/16-08:22:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:22:47] --Signature list end--
[04/25/16-08:22:47] Signatures: Total: 138;  Enabled: 136
[04/25/16-08:22:47] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-08:22:47] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-08:40:45] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-08:40:46] --Signature list start--
[04/25/16-08:40:46] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:40:46] --Signature list end--
[04/25/16-08:40:46] Signatures: Total: 138;  Enabled: 136
[04/25/16-08:40:46] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-08:40:46] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-08:53:12] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-08:53:13] --Signature list start--
[04/25/16-08:53:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-08:53:13] --Signature list end--
[04/25/16-08:53:13] Signatures: Total: 138;  Enabled: 136
[04/25/16-08:53:13] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-08:53:13] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-09:30:50] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-09:30:51] --Signature list start--
[04/25/16-09:30:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:30:51] --Signature list end--
[04/25/16-09:30:51] Signatures: Total: 138;  Enabled: 136
[04/25/16-09:30:51] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-09:30:51] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-09:45:52] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-09:45:53] --Signature list start--
[04/25/16-09:45:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-09:45:53] --Signature list end--
[04/25/16-09:45:53] Signatures: Total: 138;  Enabled: 136
[04/25/16-09:45:53] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-09:45:53] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-10:00:54] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-10:00:55] --Signature list start--
[04/25/16-10:00:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:00:55] --Signature list end--
[04/25/16-10:00:55] Signatures: Total: 138;  Enabled: 136
[04/25/16-10:00:55] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-10:00:55] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-10:06:47] *********************************************
[04/25/16-10:06:47] Network Inspection System service starting.
[04/25/16-10:06:47] Version: 4.8.10240.16384
[04/25/16-10:06:47] *********************************************
[04/25/16-10:06:47] Service started by NisIpsPlugin
[04/25/16-10:06:47] Service started
[04/25/16-10:06:47] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{EC99F753-EF3D-40F7-9638-257FACA6E601}
[04/25/16-10:06:47] Win8+: overriding fZeroDayEnabled to FALSE
[04/25/16-10:06:48] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-10:06:49] --Signature list start--
[04/25/16-10:06:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-10:06:49] --Signature list end--
[04/25/16-10:06:49] Signatures: Total: 138;  Enabled: 136
[04/25/16-10:06:49] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-10:06:49] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-10:06:49] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/25/16-10:06:49] At least one signature is active
[04/25/16-10:06:49] Connecting to the driver
[04/25/16-10:06:49] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/25/16-10:06:49] Load Definitions completed successfully.
[04/25/16-20:20:57] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-20:20:58] --Signature list start--
[04/25/16-20:20:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:20:58] --Signature list end--
[04/25/16-20:20:58] Signatures: Total: 138;  Enabled: 136
[04/25/16-20:20:58] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-20:20:58] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-20:29:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-20:29:05] --Signature list start--
[04/25/16-20:29:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-20:29:05] --Signature list end--
[04/25/16-20:29:05] Signatures: Total: 138;  Enabled: 136
[04/25/16-20:29:05] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-20:29:05] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/25/16-23:07:53] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.57.0.0
[04/25/16-23:07:54] --Signature list start--
[04/25/16-23:07:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/25/16-23:07:54] --Signature list end--
[04/25/16-23:07:54] Signatures: Total: 138;  Enabled: 136
[04/25/16-23:07:54] Active signature breakdown: BM: 136; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/25/16-23:07:54] New engine version=2.1.11804.0; New signature version=115.57.0.0
[04/26/16-14:30:27] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3B4E9D61-3052-4FB4-AB5A-5BBA77F6A666}
[04/26/16-14:30:27] Win8+: overriding fZeroDayEnabled to FALSE
[04/26/16-14:30:27] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-14:30:28] --Signature list start--
[04/26/16-14:30:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-14:30:28] --Signature list end--
[04/26/16-14:30:28] Signatures: Total: 139;  Enabled: 137
[04/26/16-14:30:28] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-14:30:28] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-14:30:28] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/26/16-14:30:28] At least one signature is active
[04/26/16-14:30:28] Already connected to the driver
[04/26/16-14:30:28] Load Definitions completed successfully.
[04/26/16-15:23:17] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-15:23:18] --Signature list start--
[04/26/16-15:23:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:23:18] --Signature list end--
[04/26/16-15:23:18] Signatures: Total: 139;  Enabled: 137
[04/26/16-15:23:18] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-15:23:18] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-15:29:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-15:29:16] --Signature list start--
[04/26/16-15:29:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-15:29:16] --Signature list end--
[04/26/16-15:29:16] Signatures: Total: 139;  Enabled: 137
[04/26/16-15:29:16] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-15:29:16] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-16:11:18] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-16:11:19] --Signature list start--
[04/26/16-16:11:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-16:11:19] --Signature list end--
[04/26/16-16:11:19] Signatures: Total: 139;  Enabled: 137
[04/26/16-16:11:19] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-16:11:19] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-17:02:31] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-17:02:31] --Signature list start--
[04/26/16-17:02:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:02:31] --Signature list end--
[04/26/16-17:02:31] Signatures: Total: 139;  Enabled: 137
[04/26/16-17:02:31] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-17:02:31] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-17:17:09] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-17:17:09] --Signature list start--
[04/26/16-17:17:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:17:09] --Signature list end--
[04/26/16-17:17:09] Signatures: Total: 139;  Enabled: 137
[04/26/16-17:17:09] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-17:17:09] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-17:44:57] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-17:44:58] --Signature list start--
[04/26/16-17:44:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:44:58] --Signature list end--
[04/26/16-17:44:58] Signatures: Total: 139;  Enabled: 137
[04/26/16-17:44:58] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-17:44:58] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-17:57:12] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-17:57:12] --Signature list start--
[04/26/16-17:57:12] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-17:57:12] --Signature list end--
[04/26/16-17:57:12] Signatures: Total: 139;  Enabled: 137
[04/26/16-17:57:12] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-17:57:12] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-18:03:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-18:03:43] --Signature list start--
[04/26/16-18:03:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:03:43] --Signature list end--
[04/26/16-18:03:43] Signatures: Total: 139;  Enabled: 137
[04/26/16-18:03:43] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-18:03:43] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/26/16-18:17:22] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.58.0.0
[04/26/16-18:17:22] --Signature list start--
[04/26/16-18:17:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/26/16-18:17:22] --Signature list end--
[04/26/16-18:17:22] Signatures: Total: 139;  Enabled: 137
[04/26/16-18:17:22] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/26/16-18:17:22] New engine version=2.1.11804.0; New signature version=115.58.0.0
[04/27/16-15:17:07] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{76938EC3-EE0D-417D-A967-35F87455E041}
[04/27/16-15:17:07] Win8+: overriding fZeroDayEnabled to FALSE
[04/27/16-15:17:07] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-15:17:08] --Signature list start--
[04/27/16-15:17:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-15:17:08] --Signature list end--
[04/27/16-15:17:08] Signatures: Total: 139;  Enabled: 137
[04/27/16-15:17:08] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-15:17:08] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-15:17:08] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/27/16-15:17:08] At least one signature is active
[04/27/16-15:17:08] Already connected to the driver
[04/27/16-15:17:08] Load Definitions completed successfully.
[04/27/16-18:35:18] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-18:35:18] --Signature list start--
[04/27/16-18:35:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:35:18] --Signature list end--
[04/27/16-18:35:18] Signatures: Total: 139;  Enabled: 137
[04/27/16-18:35:18] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-18:35:18] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-18:43:08] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-18:43:08] --Signature list start--
[04/27/16-18:43:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-18:43:08] --Signature list end--
[04/27/16-18:43:08] Signatures: Total: 139;  Enabled: 137
[04/27/16-18:43:08] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-18:43:08] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-22:33:54] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-22:33:54] --Signature list start--
[04/27/16-22:33:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:33:54] --Signature list end--
[04/27/16-22:33:54] Signatures: Total: 139;  Enabled: 137
[04/27/16-22:33:54] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-22:33:54] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-22:56:46] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-22:56:46] --Signature list start--
[04/27/16-22:56:46] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-22:56:46] --Signature list end--
[04/27/16-22:56:46] Signatures: Total: 139;  Enabled: 137
[04/27/16-22:56:46] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-22:56:46] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-23:19:22] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-23:19:22] --Signature list start--
[04/27/16-23:19:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:19:22] --Signature list end--
[04/27/16-23:19:22] Signatures: Total: 139;  Enabled: 137
[04/27/16-23:19:22] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-23:19:22] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-23:32:37] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-23:32:37] --Signature list start--
[04/27/16-23:32:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:32:37] --Signature list end--
[04/27/16-23:32:37] Signatures: Total: 139;  Enabled: 137
[04/27/16-23:32:37] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-23:32:37] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-23:50:09] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-23:50:09] --Signature list start--
[04/27/16-23:50:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:50:09] --Signature list end--
[04/27/16-23:50:09] Signatures: Total: 139;  Enabled: 137
[04/27/16-23:50:09] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-23:50:09] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/27/16-23:59:07] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/27/16-23:59:08] --Signature list start--
[04/27/16-23:59:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/27/16-23:59:08] --Signature list end--
[04/27/16-23:59:08] Signatures: Total: 139;  Enabled: 137
[04/27/16-23:59:08] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/27/16-23:59:08] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-00:20:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-00:20:42] --Signature list start--
[04/28/16-00:20:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:20:42] --Signature list end--
[04/28/16-00:20:42] Signatures: Total: 139;  Enabled: 137
[04/28/16-00:20:42] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-00:20:42] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-00:32:37] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-00:32:37] --Signature list start--
[04/28/16-00:32:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:32:37] --Signature list end--
[04/28/16-00:32:37] Signatures: Total: 139;  Enabled: 137
[04/28/16-00:32:37] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-00:32:37] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-00:40:44] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-00:40:44] --Signature list start--
[04/28/16-00:40:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:40:44] --Signature list end--
[04/28/16-00:40:44] Signatures: Total: 139;  Enabled: 137
[04/28/16-00:40:44] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-00:40:44] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-00:46:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-00:46:43] --Signature list start--
[04/28/16-00:46:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-00:46:43] --Signature list end--
[04/28/16-00:46:43] Signatures: Total: 139;  Enabled: 137
[04/28/16-00:46:43] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-00:46:43] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-01:00:47] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-01:00:47] --Signature list start--
[04/28/16-01:00:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:00:47] --Signature list end--
[04/28/16-01:00:47] Signatures: Total: 139;  Enabled: 137
[04/28/16-01:00:47] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-01:00:47] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-01:52:52] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-01:52:52] --Signature list start--
[04/28/16-01:52:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-01:52:52] --Signature list end--
[04/28/16-01:52:52] Signatures: Total: 139;  Enabled: 137
[04/28/16-01:52:52] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-01:52:52] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-02:41:00] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-02:41:00] --Signature list start--
[04/28/16-02:41:00] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:41:00] --Signature list end--
[04/28/16-02:41:00] Signatures: Total: 139;  Enabled: 137
[04/28/16-02:41:00] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-02:41:00] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-02:58:21] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-02:58:21] --Signature list start--
[04/28/16-02:58:21] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-02:58:21] --Signature list end--
[04/28/16-02:58:21] Signatures: Total: 139;  Enabled: 137
[04/28/16-02:58:21] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-02:58:21] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-02:59:50] Parse error - Cancel Inspection
[04/28/16-02:59:50] Parse error - Cancel Inspection
[04/28/16-03:17:03] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-03:17:03] --Signature list start--
[04/28/16-03:17:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:17:03] --Signature list end--
[04/28/16-03:17:03] Signatures: Total: 139;  Enabled: 137
[04/28/16-03:17:03] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-03:17:03] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-03:29:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-03:29:51] --Signature list start--
[04/28/16-03:29:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-03:29:51] --Signature list end--
[04/28/16-03:29:51] Signatures: Total: 139;  Enabled: 137
[04/28/16-03:29:51] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-03:29:51] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-03:29:51] Parse error - Cancel Inspection
[04/28/16-04:01:11] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-04:01:11] --Signature list start--
[04/28/16-04:01:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:01:11] --Signature list end--
[04/28/16-04:01:11] Signatures: Total: 139;  Enabled: 137
[04/28/16-04:01:11] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-04:01:11] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-04:12:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-04:12:15] --Signature list start--
[04/28/16-04:12:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:12:15] --Signature list end--
[04/28/16-04:12:15] Signatures: Total: 139;  Enabled: 137
[04/28/16-04:12:15] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-04:12:15] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-04:20:26] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-04:20:26] --Signature list start--
[04/28/16-04:20:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:20:26] --Signature list end--
[04/28/16-04:20:26] Signatures: Total: 139;  Enabled: 137
[04/28/16-04:20:26] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-04:20:26] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-04:32:38] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-04:32:38] --Signature list start--
[04/28/16-04:32:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:32:38] --Signature list end--
[04/28/16-04:32:38] Signatures: Total: 139;  Enabled: 137
[04/28/16-04:32:38] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-04:32:38] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-04:41:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-04:41:15] --Signature list start--
[04/28/16-04:41:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-04:41:15] --Signature list end--
[04/28/16-04:41:15] Signatures: Total: 139;  Enabled: 137
[04/28/16-04:41:15] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-04:41:15] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-05:00:21] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-05:00:22] --Signature list start--
[04/28/16-05:00:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:00:22] --Signature list end--
[04/28/16-05:00:22] Signatures: Total: 139;  Enabled: 137
[04/28/16-05:00:22] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-05:00:22] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-05:08:33] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-05:08:33] --Signature list start--
[04/28/16-05:08:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:08:33] --Signature list end--
[04/28/16-05:08:33] Signatures: Total: 139;  Enabled: 137
[04/28/16-05:08:33] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-05:08:33] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-05:21:19] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-05:21:19] --Signature list start--
[04/28/16-05:21:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:21:19] --Signature list end--
[04/28/16-05:21:19] Signatures: Total: 139;  Enabled: 137
[04/28/16-05:21:19] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-05:21:19] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-05:29:07] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-05:29:07] --Signature list start--
[04/28/16-05:29:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:29:07] --Signature list end--
[04/28/16-05:29:07] Signatures: Total: 139;  Enabled: 137
[04/28/16-05:29:07] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-05:29:07] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-05:29:51] Parse error - Cancel Inspection
[04/28/16-05:41:21] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-05:41:21] --Signature list start--
[04/28/16-05:41:21] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-05:41:21] --Signature list end--
[04/28/16-05:41:21] Signatures: Total: 139;  Enabled: 137
[04/28/16-05:41:21] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-05:41:21] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-06:01:23] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-06:01:23] --Signature list start--
[04/28/16-06:01:23] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:01:23] --Signature list end--
[04/28/16-06:01:23] Signatures: Total: 139;  Enabled: 137
[04/28/16-06:01:23] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-06:01:23] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-06:20:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-06:20:43] --Signature list start--
[04/28/16-06:20:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:20:43] --Signature list end--
[04/28/16-06:20:43] Signatures: Total: 139;  Enabled: 137
[04/28/16-06:20:43] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-06:20:43] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-06:32:38] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-06:32:38] --Signature list start--
[04/28/16-06:32:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:32:38] --Signature list end--
[04/28/16-06:32:38] Signatures: Total: 139;  Enabled: 137
[04/28/16-06:32:38] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-06:32:38] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-06:41:27] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-06:41:27] --Signature list start--
[04/28/16-06:41:27] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:41:27] --Signature list end--
[04/28/16-06:41:27] Signatures: Total: 139;  Enabled: 137
[04/28/16-06:41:27] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-06:41:27] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-06:57:33] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-06:57:33] --Signature list start--
[04/28/16-06:57:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-06:57:33] --Signature list end--
[04/28/16-06:57:33] Signatures: Total: 139;  Enabled: 137
[04/28/16-06:57:33] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-06:57:33] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-07:21:31] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-07:21:31] --Signature list start--
[04/28/16-07:21:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:21:31] --Signature list end--
[04/28/16-07:21:31] Signatures: Total: 139;  Enabled: 137
[04/28/16-07:21:31] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-07:21:31] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-07:29:52] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-07:29:52] --Signature list start--
[04/28/16-07:29:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:29:52] --Signature list end--
[04/28/16-07:29:52] Signatures: Total: 139;  Enabled: 137
[04/28/16-07:29:52] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-07:29:52] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-07:29:52] Parse error - Cancel Inspection
[04/28/16-07:41:34] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-07:41:34] --Signature list start--
[04/28/16-07:41:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-07:41:34] --Signature list end--
[04/28/16-07:41:34] Signatures: Total: 139;  Enabled: 137
[04/28/16-07:41:34] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-07:41:34] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-08:23:08] *********************************************
[04/28/16-08:23:08] Network Inspection System service starting.
[04/28/16-08:23:08] Version: 4.8.10240.16384
[04/28/16-08:23:08] *********************************************
[04/28/16-08:23:08] Service started by NisIpsPlugin
[04/28/16-08:23:08] Service started
[04/28/16-08:23:54] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{76938EC3-EE0D-417D-A967-35F87455E041}
[04/28/16-08:23:54] Win8+: overriding fZeroDayEnabled to FALSE
[04/28/16-08:23:55] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-08:23:57] --Signature list start--
[04/28/16-08:23:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-08:23:57] --Signature list end--
[04/28/16-08:23:57] Signatures: Total: 139;  Enabled: 137
[04/28/16-08:23:57] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-08:23:57] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-08:23:57] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/28/16-08:23:57] At least one signature is active
[04/28/16-08:23:57] Connecting to the driver
[04/28/16-08:23:57] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/28/16-08:23:57] Load Definitions completed successfully.
[04/28/16-08:25:40] Parse error - Cancel Inspection
[04/28/16-08:25:40] Parse error - Cancel Inspection
[04/28/16-09:12:54] *********************************************
[04/28/16-09:12:54] Network Inspection System service starting.
[04/28/16-09:12:54] Version: 4.8.10240.16384
[04/28/16-09:12:54] *********************************************
[04/28/16-09:12:54] Service started by NisIpsPlugin
[04/28/16-09:12:54] Service started
[04/28/16-09:12:55] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{76938EC3-EE0D-417D-A967-35F87455E041}
[04/28/16-09:12:55] Win8+: overriding fZeroDayEnabled to FALSE
[04/28/16-09:12:55] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.59.0.0
[04/28/16-09:12:55] --Signature list start--
[04/28/16-09:12:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:12:55] --Signature list end--
[04/28/16-09:12:55] Signatures: Total: 139;  Enabled: 137
[04/28/16-09:12:55] Active signature breakdown: BM: 137; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-09:12:55] New engine version=2.1.11804.0; New signature version=115.59.0.0
[04/28/16-09:12:55] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/28/16-09:12:55] At least one signature is active
[04/28/16-09:12:55] Connecting to the driver
[04/28/16-09:12:55] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[04/28/16-09:12:55] Load Definitions completed successfully.
[04/28/16-09:18:30] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8ED040F9-944A-4531-85A9-23A7A2978510}
[04/28/16-09:18:30] Win8+: overriding fZeroDayEnabled to FALSE
[04/28/16-09:18:30] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-09:18:30] --Signature list start--
[04/28/16-09:18:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-09:18:30] --Signature list end--
[04/28/16-09:18:30] Signatures: Total: 140;  Enabled: 138
[04/28/16-09:18:30] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-09:18:30] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-09:18:30] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[04/28/16-09:18:30] At least one signature is active
[04/28/16-09:18:30] Already connected to the driver
[04/28/16-09:18:30] Load Definitions completed successfully.
[04/28/16-10:22:21] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-10:22:21] --Signature list start--
[04/28/16-10:22:21] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:22:21] --Signature list end--
[04/28/16-10:22:21] Signatures: Total: 140;  Enabled: 138
[04/28/16-10:22:21] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-10:22:21] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-10:31:46] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-10:31:47] --Signature list start--
[04/28/16-10:31:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:31:47] --Signature list end--
[04/28/16-10:31:47] Signatures: Total: 140;  Enabled: 138
[04/28/16-10:31:47] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-10:31:47] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-10:42:01] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-10:42:01] --Signature list start--
[04/28/16-10:42:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-10:42:01] --Signature list end--
[04/28/16-10:42:01] Signatures: Total: 140;  Enabled: 138
[04/28/16-10:42:01] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-10:42:01] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-11:51:53] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-11:51:54] --Signature list start--
[04/28/16-11:51:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:51:54] --Signature list end--
[04/28/16-11:51:54] Signatures: Total: 140;  Enabled: 138
[04/28/16-11:51:54] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-11:51:54] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-11:59:27] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-11:59:27] --Signature list start--
[04/28/16-11:59:27] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-11:59:27] --Signature list end--
[04/28/16-11:59:27] Signatures: Total: 140;  Enabled: 138
[04/28/16-11:59:27] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-11:59:27] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-12:31:55] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-12:31:55] --Signature list start--
[04/28/16-12:31:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:31:55] --Signature list end--
[04/28/16-12:31:55] Signatures: Total: 140;  Enabled: 138
[04/28/16-12:31:55] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-12:31:55] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-12:51:56] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-12:51:57] --Signature list start--
[04/28/16-12:51:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-12:51:57] --Signature list end--
[04/28/16-12:51:57] Signatures: Total: 140;  Enabled: 138
[04/28/16-12:51:57] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-12:51:57] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-13:00:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-13:00:51] --Signature list start--
[04/28/16-13:00:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:00:51] --Signature list end--
[04/28/16-13:00:51] Signatures: Total: 140;  Enabled: 138
[04/28/16-13:00:51] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-13:00:51] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-13:11:57] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-13:11:58] --Signature list start--
[04/28/16-13:11:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:11:58] --Signature list end--
[04/28/16-13:11:58] Signatures: Total: 140;  Enabled: 138
[04/28/16-13:11:58] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-13:11:58] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-13:23:55] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-13:23:55] --Signature list start--
[04/28/16-13:23:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:23:55] --Signature list end--
[04/28/16-13:23:55] Signatures: Total: 140;  Enabled: 138
[04/28/16-13:23:55] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-13:23:55] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-13:43:25] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-13:43:25] --Signature list start--
[04/28/16-13:43:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:43:25] --Signature list end--
[04/28/16-13:43:25] Signatures: Total: 140;  Enabled: 138
[04/28/16-13:43:25] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-13:43:25] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-13:51:59] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-13:51:59] --Signature list start--
[04/28/16-13:51:59] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-13:51:59] --Signature list end--
[04/28/16-13:51:59] Signatures: Total: 140;  Enabled: 138
[04/28/16-13:51:59] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-13:51:59] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-14:02:39] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-14:02:40] --Signature list start--
[04/28/16-14:02:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:02:40] --Signature list end--
[04/28/16-14:02:40] Signatures: Total: 140;  Enabled: 138
[04/28/16-14:02:40] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-14:02:40] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-14:09:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-14:09:04] --Signature list start--
[04/28/16-14:09:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:09:04] --Signature list end--
[04/28/16-14:09:04] Signatures: Total: 140;  Enabled: 138
[04/28/16-14:09:04] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-14:09:04] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-14:28:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-14:28:04] --Signature list start--
[04/28/16-14:28:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:28:04] --Signature list end--
[04/28/16-14:28:04] Signatures: Total: 140;  Enabled: 138
[04/28/16-14:28:04] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-14:28:04] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-14:52:03] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-14:52:04] --Signature list start--
[04/28/16-14:52:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-14:52:04] --Signature list end--
[04/28/16-14:52:04] Signatures: Total: 140;  Enabled: 138
[04/28/16-14:52:04] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-14:52:04] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-15:02:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-15:02:40] --Signature list start--
[04/28/16-15:02:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:02:40] --Signature list end--
[04/28/16-15:02:40] Signatures: Total: 140;  Enabled: 138
[04/28/16-15:02:40] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-15:02:40] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-15:12:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-15:12:04] --Signature list start--
[04/28/16-15:12:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:12:04] --Signature list end--
[04/28/16-15:12:04] Signatures: Total: 140;  Enabled: 138
[04/28/16-15:12:04] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-15:12:04] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-15:23:01] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-15:23:01] --Signature list start--
[04/28/16-15:23:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:23:01] --Signature list end--
[04/28/16-15:23:01] Signatures: Total: 140;  Enabled: 138
[04/28/16-15:23:01] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-15:23:01] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-15:32:05] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-15:32:06] --Signature list start--
[04/28/16-15:32:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:32:06] --Signature list end--
[04/28/16-15:32:06] Signatures: Total: 140;  Enabled: 138
[04/28/16-15:32:06] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-15:32:06] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-15:40:11] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-15:40:11] --Signature list start--
[04/28/16-15:40:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:40:11] --Signature list end--
[04/28/16-15:40:11] Signatures: Total: 140;  Enabled: 138
[04/28/16-15:40:11] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-15:40:11] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-15:59:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-15:59:04] --Signature list start--
[04/28/16-15:59:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-15:59:04] --Signature list end--
[04/28/16-15:59:04] Signatures: Total: 140;  Enabled: 138
[04/28/16-15:59:04] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-15:59:04] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-16:12:07] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-16:12:08] --Signature list start--
[04/28/16-16:12:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:12:08] --Signature list end--
[04/28/16-16:12:08] Signatures: Total: 140;  Enabled: 138
[04/28/16-16:12:08] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-16:12:08] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-16:32:08] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-16:32:09] --Signature list start--
[04/28/16-16:32:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:32:09] --Signature list end--
[04/28/16-16:32:09] Signatures: Total: 140;  Enabled: 138
[04/28/16-16:32:09] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-16:32:09] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-16:44:14] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-16:44:14] --Signature list start--
[04/28/16-16:44:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-16:44:14] --Signature list end--
[04/28/16-16:44:14] Signatures: Total: 140;  Enabled: 138
[04/28/16-16:44:14] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-16:44:14] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-17:01:54] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-17:01:54] --Signature list start--
[04/28/16-17:01:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:01:54] --Signature list end--
[04/28/16-17:01:54] Signatures: Total: 140;  Enabled: 138
[04/28/16-17:01:54] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-17:01:54] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-17:20:56] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-17:20:56] --Signature list start--
[04/28/16-17:20:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:20:56] --Signature list end--
[04/28/16-17:20:56] Signatures: Total: 140;  Enabled: 138
[04/28/16-17:20:56] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-17:20:56] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-17:29:21] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-17:29:21] --Signature list start--
[04/28/16-17:29:21] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-17:29:21] --Signature list end--
[04/28/16-17:29:21] Signatures: Total: 140;  Enabled: 138
[04/28/16-17:29:21] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-17:29:21] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-18:11:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-18:11:16] --Signature list start--
[04/28/16-18:11:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:11:16] --Signature list end--
[04/28/16-18:11:16] Signatures: Total: 140;  Enabled: 138
[04/28/16-18:11:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-18:11:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-18:32:36] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-18:32:36] --Signature list start--
[04/28/16-18:32:36] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:32:36] --Signature list end--
[04/28/16-18:32:36] Signatures: Total: 140;  Enabled: 138
[04/28/16-18:32:36] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-18:32:36] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-18:52:38] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-18:52:38] --Signature list start--
[04/28/16-18:52:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-18:52:38] --Signature list end--
[04/28/16-18:52:38] Signatures: Total: 140;  Enabled: 138
[04/28/16-18:52:38] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-18:52:38] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-19:02:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-19:02:42] --Signature list start--
[04/28/16-19:02:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:02:42] --Signature list end--
[04/28/16-19:02:42] Signatures: Total: 140;  Enabled: 138
[04/28/16-19:02:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-19:02:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-19:29:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-19:29:42] --Signature list start--
[04/28/16-19:29:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-19:29:42] --Signature list end--
[04/28/16-19:29:42] Signatures: Total: 140;  Enabled: 138
[04/28/16-19:29:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-19:29:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-20:02:43] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-20:02:43] --Signature list start--
[04/28/16-20:02:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:02:43] --Signature list end--
[04/28/16-20:02:43] Signatures: Total: 140;  Enabled: 138
[04/28/16-20:02:43] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-20:02:43] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-20:12:47] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-20:12:48] --Signature list start--
[04/28/16-20:12:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:12:48] --Signature list end--
[04/28/16-20:12:48] Signatures: Total: 140;  Enabled: 138
[04/28/16-20:12:48] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-20:12:48] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-20:20:57] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-20:20:57] --Signature list start--
[04/28/16-20:20:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:20:57] --Signature list end--
[04/28/16-20:20:57] Signatures: Total: 140;  Enabled: 138
[04/28/16-20:20:57] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-20:20:57] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-20:32:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-20:32:41] --Signature list start--
[04/28/16-20:32:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:32:41] --Signature list end--
[04/28/16-20:32:41] Signatures: Total: 140;  Enabled: 138
[04/28/16-20:32:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-20:32:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-20:47:52] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-20:47:52] --Signature list start--
[04/28/16-20:47:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-20:47:52] --Signature list end--
[04/28/16-20:47:52] Signatures: Total: 140;  Enabled: 138
[04/28/16-20:47:52] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-20:47:52] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-21:02:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-21:02:41] --Signature list start--
[04/28/16-21:02:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:02:41] --Signature list end--
[04/28/16-21:02:41] Signatures: Total: 140;  Enabled: 138
[04/28/16-21:02:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-21:02:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-21:13:05] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-21:13:06] --Signature list start--
[04/28/16-21:13:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:13:06] --Signature list end--
[04/28/16-21:13:06] Signatures: Total: 140;  Enabled: 138
[04/28/16-21:13:06] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-21:13:06] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-21:32:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-21:32:41] --Signature list start--
[04/28/16-21:32:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:32:41] --Signature list end--
[04/28/16-21:32:41] Signatures: Total: 140;  Enabled: 138
[04/28/16-21:32:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-21:32:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-21:52:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-21:52:04] --Signature list start--
[04/28/16-21:52:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-21:52:04] --Signature list end--
[04/28/16-21:52:04] Signatures: Total: 140;  Enabled: 138
[04/28/16-21:52:04] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-21:52:04] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-22:13:13] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-22:13:13] --Signature list start--
[04/28/16-22:13:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:13:13] --Signature list end--
[04/28/16-22:13:13] Signatures: Total: 140;  Enabled: 138
[04/28/16-22:13:13] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-22:13:13] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-22:32:43] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-22:32:43] --Signature list start--
[04/28/16-22:32:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-22:32:43] --Signature list end--
[04/28/16-22:32:43] Signatures: Total: 140;  Enabled: 138
[04/28/16-22:32:43] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-22:32:43] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-23:02:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-23:02:42] --Signature list start--
[04/28/16-23:02:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:02:42] --Signature list end--
[04/28/16-23:02:42] Signatures: Total: 140;  Enabled: 138
[04/28/16-23:02:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-23:02:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-23:13:19] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-23:13:20] --Signature list start--
[04/28/16-23:13:20] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:13:20] --Signature list end--
[04/28/16-23:13:20] Signatures: Total: 140;  Enabled: 138
[04/28/16-23:13:20] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-23:13:20] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-23:53:26] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-23:53:26] --Signature list start--
[04/28/16-23:53:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:53:26] --Signature list end--
[04/28/16-23:53:26] Signatures: Total: 140;  Enabled: 138
[04/28/16-23:53:26] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-23:53:26] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/28/16-23:59:06] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/28/16-23:59:06] --Signature list start--
[04/28/16-23:59:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/28/16-23:59:06] --Signature list end--
[04/28/16-23:59:06] Signatures: Total: 140;  Enabled: 138
[04/28/16-23:59:06] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/28/16-23:59:06] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-00:13:28] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-00:13:28] --Signature list start--
[04/29/16-00:13:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:13:28] --Signature list end--
[04/29/16-00:13:28] Signatures: Total: 140;  Enabled: 138
[04/29/16-00:13:28] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-00:13:28] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-00:19:33] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-00:19:33] --Signature list start--
[04/29/16-00:19:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:19:33] --Signature list end--
[04/29/16-00:19:33] Signatures: Total: 140;  Enabled: 138
[04/29/16-00:19:33] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-00:19:33] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-00:26:26] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-00:26:27] --Signature list start--
[04/29/16-00:26:27] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:26:27] --Signature list end--
[04/29/16-00:26:27] Signatures: Total: 140;  Enabled: 138
[04/29/16-00:26:27] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-00:26:27] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-00:53:32] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-00:53:32] --Signature list start--
[04/29/16-00:53:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-00:53:32] --Signature list end--
[04/29/16-00:53:32] Signatures: Total: 140;  Enabled: 138
[04/29/16-00:53:32] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-00:53:32] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-01:02:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-01:02:41] --Signature list start--
[04/29/16-01:02:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:02:41] --Signature list end--
[04/29/16-01:02:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-01:02:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-01:02:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-01:12:53] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-01:12:53] --Signature list start--
[04/29/16-01:12:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:12:53] --Signature list end--
[04/29/16-01:12:53] Signatures: Total: 140;  Enabled: 138
[04/29/16-01:12:53] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-01:12:53] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-01:53:37] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-01:53:38] --Signature list start--
[04/29/16-01:53:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-01:53:38] --Signature list end--
[04/29/16-01:53:38] Signatures: Total: 140;  Enabled: 138
[04/29/16-01:53:38] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-01:53:38] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-02:02:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-02:02:40] --Signature list start--
[04/29/16-02:02:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:02:41] --Signature list end--
[04/29/16-02:02:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-02:02:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-02:02:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-02:13:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-02:13:40] --Signature list start--
[04/29/16-02:13:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:13:40] --Signature list end--
[04/29/16-02:13:40] Signatures: Total: 140;  Enabled: 138
[04/29/16-02:13:40] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-02:13:40] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-02:26:00] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-02:26:01] --Signature list start--
[04/29/16-02:26:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:26:01] --Signature list end--
[04/29/16-02:26:01] Signatures: Total: 140;  Enabled: 138
[04/29/16-02:26:01] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-02:26:01] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-02:32:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-02:32:42] --Signature list start--
[04/29/16-02:32:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:32:42] --Signature list end--
[04/29/16-02:32:42] Signatures: Total: 140;  Enabled: 138
[04/29/16-02:32:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-02:32:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-02:53:50] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-02:53:50] --Signature list start--
[04/29/16-02:53:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-02:53:50] --Signature list end--
[04/29/16-02:53:50] Signatures: Total: 140;  Enabled: 138
[04/29/16-02:53:50] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-02:53:50] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-03:02:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-03:02:41] --Signature list start--
[04/29/16-03:02:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:02:41] --Signature list end--
[04/29/16-03:02:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-03:02:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-03:02:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-03:13:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-03:13:52] --Signature list start--
[04/29/16-03:13:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:13:52] --Signature list end--
[04/29/16-03:13:52] Signatures: Total: 140;  Enabled: 138
[04/29/16-03:13:52] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-03:13:52] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-03:32:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-03:32:42] --Signature list start--
[04/29/16-03:32:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:32:42] --Signature list end--
[04/29/16-03:32:42] Signatures: Total: 140;  Enabled: 138
[04/29/16-03:32:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-03:32:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-03:44:25] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-03:44:25] --Signature list start--
[04/29/16-03:44:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:44:25] --Signature list end--
[04/29/16-03:44:25] Signatures: Total: 140;  Enabled: 138
[04/29/16-03:44:25] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-03:44:25] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-03:53:56] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-03:53:56] --Signature list start--
[04/29/16-03:53:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-03:53:56] --Signature list end--
[04/29/16-03:53:56] Signatures: Total: 140;  Enabled: 138
[04/29/16-03:53:56] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-03:53:56] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-04:02:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-04:02:41] --Signature list start--
[04/29/16-04:02:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:02:41] --Signature list end--
[04/29/16-04:02:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-04:02:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-04:02:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-04:13:58] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-04:13:58] --Signature list start--
[04/29/16-04:13:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:13:58] --Signature list end--
[04/29/16-04:13:58] Signatures: Total: 140;  Enabled: 138
[04/29/16-04:13:58] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-04:13:58] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-04:27:03] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-04:27:03] --Signature list start--
[04/29/16-04:27:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:27:03] --Signature list end--
[04/29/16-04:27:03] Signatures: Total: 140;  Enabled: 138
[04/29/16-04:27:03] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-04:27:03] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-04:32:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-04:32:40] --Signature list start--
[04/29/16-04:32:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:32:40] --Signature list end--
[04/29/16-04:32:40] Signatures: Total: 140;  Enabled: 138
[04/29/16-04:32:40] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-04:32:40] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-04:51:18] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-04:51:18] --Signature list start--
[04/29/16-04:51:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-04:51:18] --Signature list end--
[04/29/16-04:51:18] Signatures: Total: 140;  Enabled: 138
[04/29/16-04:51:18] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-04:51:18] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-05:02:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-05:02:41] --Signature list start--
[04/29/16-05:02:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:02:41] --Signature list end--
[04/29/16-05:02:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-05:02:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-05:02:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-05:14:04] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-05:14:04] --Signature list start--
[04/29/16-05:14:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:14:04] --Signature list end--
[04/29/16-05:14:04] Signatures: Total: 140;  Enabled: 138
[04/29/16-05:14:04] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-05:14:04] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-05:32:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-05:32:41] --Signature list start--
[04/29/16-05:32:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:32:41] --Signature list end--
[04/29/16-05:32:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-05:32:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-05:32:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-05:54:08] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-05:54:08] --Signature list start--
[04/29/16-05:54:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-05:54:08] --Signature list end--
[04/29/16-05:54:08] Signatures: Total: 140;  Enabled: 138
[04/29/16-05:54:08] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-05:54:08] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-06:02:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-06:02:41] --Signature list start--
[04/29/16-06:02:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:02:41] --Signature list end--
[04/29/16-06:02:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-06:02:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-06:02:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-06:14:10] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-06:14:10] --Signature list start--
[04/29/16-06:14:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:14:10] --Signature list end--
[04/29/16-06:14:10] Signatures: Total: 140;  Enabled: 138
[04/29/16-06:14:10] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-06:14:10] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-06:24:35] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-06:24:35] --Signature list start--
[04/29/16-06:24:35] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:24:35] --Signature list end--
[04/29/16-06:24:35] Signatures: Total: 140;  Enabled: 138
[04/29/16-06:24:35] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-06:24:35] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-06:31:24] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-06:31:24] --Signature list start--
[04/29/16-06:31:24] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:31:24] --Signature list end--
[04/29/16-06:31:24] Signatures: Total: 140;  Enabled: 138
[04/29/16-06:31:24] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-06:31:24] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-06:50:40] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-06:50:40] --Signature list start--
[04/29/16-06:50:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-06:50:40] --Signature list end--
[04/29/16-06:50:40] Signatures: Total: 140;  Enabled: 138
[04/29/16-06:50:40] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-06:50:40] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-07:02:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-07:02:42] --Signature list start--
[04/29/16-07:02:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:02:42] --Signature list end--
[04/29/16-07:02:42] Signatures: Total: 140;  Enabled: 138
[04/29/16-07:02:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-07:02:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-07:14:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-07:14:16] --Signature list start--
[04/29/16-07:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:14:16] --Signature list end--
[04/29/16-07:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-07:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-07:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-07:54:20] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-07:54:20] --Signature list start--
[04/29/16-07:54:20] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-07:54:20] --Signature list end--
[04/29/16-07:54:20] Signatures: Total: 140;  Enabled: 138
[04/29/16-07:54:20] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-07:54:20] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-08:02:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-08:02:42] --Signature list start--
[04/29/16-08:02:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:02:42] --Signature list end--
[04/29/16-08:02:42] Signatures: Total: 140;  Enabled: 138
[04/29/16-08:02:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-08:02:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-08:14:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-08:14:16] --Signature list start--
[04/29/16-08:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:14:16] --Signature list end--
[04/29/16-08:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-08:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-08:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-08:23:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-08:23:15] --Signature list start--
[04/29/16-08:23:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:23:15] --Signature list end--
[04/29/16-08:23:15] Signatures: Total: 140;  Enabled: 138
[04/29/16-08:23:15] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-08:23:15] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-08:42:33] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-08:42:33] --Signature list start--
[04/29/16-08:42:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:42:33] --Signature list end--
[04/29/16-08:42:33] Signatures: Total: 140;  Enabled: 138
[04/29/16-08:42:33] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-08:42:33] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-08:47:56] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-08:47:56] --Signature list start--
[04/29/16-08:47:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-08:47:56] --Signature list end--
[04/29/16-08:47:56] Signatures: Total: 140;  Enabled: 138
[04/29/16-08:47:56] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-08:47:56] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-09:02:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-09:02:42] --Signature list start--
[04/29/16-09:02:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:02:42] --Signature list end--
[04/29/16-09:02:42] Signatures: Total: 140;  Enabled: 138
[04/29/16-09:02:42] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-09:02:42] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-09:13:57] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-09:13:57] --Signature list start--
[04/29/16-09:13:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:13:57] --Signature list end--
[04/29/16-09:13:57] Signatures: Total: 140;  Enabled: 138
[04/29/16-09:13:57] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-09:13:57] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-09:28:14] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-09:28:14] --Signature list start--
[04/29/16-09:28:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:28:14] --Signature list end--
[04/29/16-09:28:14] Signatures: Total: 140;  Enabled: 138
[04/29/16-09:28:14] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-09:28:14] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-09:40:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-09:40:16] --Signature list start--
[04/29/16-09:40:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:40:16] --Signature list end--
[04/29/16-09:40:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-09:40:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-09:40:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-09:47:52] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-09:47:52] --Signature list start--
[04/29/16-09:47:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-09:47:52] --Signature list end--
[04/29/16-09:47:52] Signatures: Total: 140;  Enabled: 138
[04/29/16-09:47:52] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-09:47:52] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-10:52:24] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-10:52:25] --Signature list start--
[04/29/16-10:52:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-10:52:25] --Signature list end--
[04/29/16-10:52:25] Signatures: Total: 140;  Enabled: 138
[04/29/16-10:52:25] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-10:52:25] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-11:02:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-11:02:17] --Signature list start--
[04/29/16-11:02:17] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:02:17] --Signature list end--
[04/29/16-11:02:17] Signatures: Total: 140;  Enabled: 138
[04/29/16-11:02:17] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-11:02:17] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-11:14:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-11:14:15] --Signature list start--
[04/29/16-11:14:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:14:15] --Signature list end--
[04/29/16-11:14:15] Signatures: Total: 140;  Enabled: 138
[04/29/16-11:14:15] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-11:14:15] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-11:26:58] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-11:26:58] --Signature list start--
[04/29/16-11:26:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:26:58] --Signature list end--
[04/29/16-11:26:58] Signatures: Total: 140;  Enabled: 138
[04/29/16-11:26:58] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-11:26:58] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-11:51:00] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-11:51:01] --Signature list start--
[04/29/16-11:51:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-11:51:01] --Signature list end--
[04/29/16-11:51:01] Signatures: Total: 140;  Enabled: 138
[04/29/16-11:51:01] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-11:51:01] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-12:02:44] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-12:02:44] --Signature list start--
[04/29/16-12:02:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:02:44] --Signature list end--
[04/29/16-12:02:44] Signatures: Total: 140;  Enabled: 138
[04/29/16-12:02:44] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-12:02:44] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-12:14:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-12:14:16] --Signature list start--
[04/29/16-12:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:14:16] --Signature list end--
[04/29/16-12:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-12:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-12:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-12:32:43] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-12:32:43] --Signature list start--
[04/29/16-12:32:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:32:43] --Signature list end--
[04/29/16-12:32:43] Signatures: Total: 140;  Enabled: 138
[04/29/16-12:32:43] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-12:32:43] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-12:42:54] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-12:42:54] --Signature list start--
[04/29/16-12:42:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:42:54] --Signature list end--
[04/29/16-12:42:54] Signatures: Total: 140;  Enabled: 138
[04/29/16-12:42:54] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-12:42:54] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-12:54:53] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-12:54:53] --Signature list start--
[04/29/16-12:54:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-12:54:53] --Signature list end--
[04/29/16-12:54:53] Signatures: Total: 140;  Enabled: 138
[04/29/16-12:54:53] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-12:54:53] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-13:00:33] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-13:00:34] --Signature list start--
[04/29/16-13:00:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:00:34] --Signature list end--
[04/29/16-13:00:34] Signatures: Total: 140;  Enabled: 138
[04/29/16-13:00:34] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-13:00:34] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-13:14:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-13:14:16] --Signature list start--
[04/29/16-13:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:14:16] --Signature list end--
[04/29/16-13:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-13:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-13:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-13:32:43] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-13:32:43] --Signature list start--
[04/29/16-13:32:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:32:43] --Signature list end--
[04/29/16-13:32:43] Signatures: Total: 140;  Enabled: 138
[04/29/16-13:32:43] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-13:32:43] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-13:47:41] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-13:47:41] --Signature list start--
[04/29/16-13:47:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-13:47:41] --Signature list end--
[04/29/16-13:47:41] Signatures: Total: 140;  Enabled: 138
[04/29/16-13:47:41] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-13:47:41] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-14:02:44] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-14:02:44] --Signature list start--
[04/29/16-14:02:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:02:44] --Signature list end--
[04/29/16-14:02:44] Signatures: Total: 140;  Enabled: 138
[04/29/16-14:02:44] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-14:02:44] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-14:14:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-14:14:16] --Signature list start--
[04/29/16-14:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:14:16] --Signature list end--
[04/29/16-14:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-14:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-14:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-14:32:44] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-14:32:45] --Signature list start--
[04/29/16-14:32:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:32:45] --Signature list end--
[04/29/16-14:32:45] Signatures: Total: 140;  Enabled: 138
[04/29/16-14:32:45] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-14:32:45] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-14:44:59] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-14:44:59] --Signature list start--
[04/29/16-14:44:59] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-14:44:59] --Signature list end--
[04/29/16-14:44:59] Signatures: Total: 140;  Enabled: 138
[04/29/16-14:44:59] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-14:44:59] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-15:02:44] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-15:02:45] --Signature list start--
[04/29/16-15:02:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:02:45] --Signature list end--
[04/29/16-15:02:45] Signatures: Total: 140;  Enabled: 138
[04/29/16-15:02:45] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-15:02:45] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-15:10:12] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-15:10:12] --Signature list start--
[04/29/16-15:10:12] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:10:12] --Signature list end--
[04/29/16-15:10:12] Signatures: Total: 140;  Enabled: 138
[04/29/16-15:10:12] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-15:10:12] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-15:32:45] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-15:32:46] --Signature list start--
[04/29/16-15:32:46] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:32:46] --Signature list end--
[04/29/16-15:32:46] Signatures: Total: 140;  Enabled: 138
[04/29/16-15:32:46] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-15:32:46] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-15:55:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-15:55:16] --Signature list start--
[04/29/16-15:55:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-15:55:16] --Signature list end--
[04/29/16-15:55:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-15:55:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-15:55:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-16:14:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-16:14:16] --Signature list start--
[04/29/16-16:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:14:16] --Signature list end--
[04/29/16-16:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-16:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-16:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-16:32:45] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-16:32:45] --Signature list start--
[04/29/16-16:32:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:32:45] --Signature list end--
[04/29/16-16:32:45] Signatures: Total: 140;  Enabled: 138
[04/29/16-16:32:45] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-16:32:45] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-16:52:53] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-16:52:53] --Signature list start--
[04/29/16-16:52:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-16:52:53] --Signature list end--
[04/29/16-16:52:53] Signatures: Total: 140;  Enabled: 138
[04/29/16-16:52:53] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-16:52:53] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-17:00:27] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-17:00:27] --Signature list start--
[04/29/16-17:00:27] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:00:27] --Signature list end--
[04/29/16-17:00:27] Signatures: Total: 140;  Enabled: 138
[04/29/16-17:00:27] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-17:00:27] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-17:20:29] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-17:20:29] --Signature list start--
[04/29/16-17:20:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:20:29] --Signature list end--
[04/29/16-17:20:29] Signatures: Total: 140;  Enabled: 138
[04/29/16-17:20:29] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-17:20:29] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-17:32:45] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-17:32:45] --Signature list start--
[04/29/16-17:32:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:32:45] --Signature list end--
[04/29/16-17:32:45] Signatures: Total: 140;  Enabled: 138
[04/29/16-17:32:45] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-17:32:45] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-17:49:05] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-17:49:05] --Signature list start--
[04/29/16-17:49:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:49:05] --Signature list end--
[04/29/16-17:49:05] Signatures: Total: 140;  Enabled: 138
[04/29/16-17:49:05] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-17:49:05] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-17:55:28] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-17:55:28] --Signature list start--
[04/29/16-17:55:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-17:55:28] --Signature list end--
[04/29/16-17:55:28] Signatures: Total: 140;  Enabled: 138
[04/29/16-17:55:28] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-17:55:28] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-18:14:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-18:14:16] --Signature list start--
[04/29/16-18:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:14:16] --Signature list end--
[04/29/16-18:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-18:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-18:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-18:32:46] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-18:32:47] --Signature list start--
[04/29/16-18:32:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:32:47] --Signature list end--
[04/29/16-18:32:47] Signatures: Total: 140;  Enabled: 138
[04/29/16-18:32:47] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-18:32:47] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-18:55:37] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-18:55:37] --Signature list start--
[04/29/16-18:55:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-18:55:37] --Signature list end--
[04/29/16-18:55:37] Signatures: Total: 140;  Enabled: 138
[04/29/16-18:55:37] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-18:55:37] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-19:14:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-19:14:16] --Signature list start--
[04/29/16-19:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:14:16] --Signature list end--
[04/29/16-19:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-19:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-19:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-19:22:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-19:22:15] --Signature list start--
[04/29/16-19:22:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:22:15] --Signature list end--
[04/29/16-19:22:15] Signatures: Total: 140;  Enabled: 138
[04/29/16-19:22:15] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-19:22:15] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-19:50:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-19:50:16] --Signature list start--
[04/29/16-19:50:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:50:16] --Signature list end--
[04/29/16-19:50:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-19:50:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-19:50:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-19:55:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-19:55:43] --Signature list start--
[04/29/16-19:55:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-19:55:43] --Signature list end--
[04/29/16-19:55:43] Signatures: Total: 140;  Enabled: 138
[04/29/16-19:55:43] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-19:55:43] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-20:02:49] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-20:02:50] --Signature list start--
[04/29/16-20:02:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:02:50] --Signature list end--
[04/29/16-20:02:50] Signatures: Total: 140;  Enabled: 138
[04/29/16-20:02:50] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-20:02:50] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-20:11:52] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-20:11:52] --Signature list start--
[04/29/16-20:11:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:11:52] --Signature list end--
[04/29/16-20:11:52] Signatures: Total: 140;  Enabled: 138
[04/29/16-20:11:52] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-20:11:52] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-20:32:48] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-20:32:48] --Signature list start--
[04/29/16-20:32:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:32:48] --Signature list end--
[04/29/16-20:32:48] Signatures: Total: 140;  Enabled: 138
[04/29/16-20:32:48] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-20:32:48] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-20:50:42] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-20:50:43] --Signature list start--
[04/29/16-20:50:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:50:43] --Signature list end--
[04/29/16-20:50:43] Signatures: Total: 140;  Enabled: 138
[04/29/16-20:50:43] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-20:50:43] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-20:55:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-20:55:52] --Signature list start--
[04/29/16-20:55:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-20:55:52] --Signature list end--
[04/29/16-20:55:52] Signatures: Total: 140;  Enabled: 138
[04/29/16-20:55:52] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-20:55:52] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-21:02:47] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-21:02:48] --Signature list start--
[04/29/16-21:02:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:02:48] --Signature list end--
[04/29/16-21:02:48] Signatures: Total: 140;  Enabled: 138
[04/29/16-21:02:48] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-21:02:48] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-21:14:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-21:14:16] --Signature list start--
[04/29/16-21:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:14:16] --Signature list end--
[04/29/16-21:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-21:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-21:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-21:32:47] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-21:32:47] --Signature list start--
[04/29/16-21:32:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:32:47] --Signature list end--
[04/29/16-21:32:47] Signatures: Total: 140;  Enabled: 138
[04/29/16-21:32:47] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-21:32:47] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-21:43:51] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-21:43:51] --Signature list start--
[04/29/16-21:43:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-21:43:51] --Signature list end--
[04/29/16-21:43:51] Signatures: Total: 140;  Enabled: 138
[04/29/16-21:43:51] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-21:43:51] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-22:02:47] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-22:02:47] --Signature list start--
[04/29/16-22:02:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:02:47] --Signature list end--
[04/29/16-22:02:47] Signatures: Total: 140;  Enabled: 138
[04/29/16-22:02:47] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-22:02:47] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-22:14:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-22:14:16] --Signature list start--
[04/29/16-22:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:14:16] --Signature list end--
[04/29/16-22:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-22:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-22:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-22:32:47] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-22:32:47] --Signature list start--
[04/29/16-22:32:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:32:47] --Signature list end--
[04/29/16-22:32:47] Signatures: Total: 140;  Enabled: 138
[04/29/16-22:32:47] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-22:32:47] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-22:56:07] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-22:56:07] --Signature list start--
[04/29/16-22:56:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-22:56:07] --Signature list end--
[04/29/16-22:56:07] Signatures: Total: 140;  Enabled: 138
[04/29/16-22:56:07] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-22:56:07] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-23:02:49] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-23:02:49] --Signature list start--
[04/29/16-23:02:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:02:49] --Signature list end--
[04/29/16-23:02:49] Signatures: Total: 140;  Enabled: 138
[04/29/16-23:02:49] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-23:02:49] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-23:14:16] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-23:14:16] --Signature list start--
[04/29/16-23:14:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:14:16] --Signature list end--
[04/29/16-23:14:16] Signatures: Total: 140;  Enabled: 138
[04/29/16-23:14:16] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-23:14:16] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-23:32:48] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-23:32:48] --Signature list start--
[04/29/16-23:32:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:32:49] --Signature list end--
[04/29/16-23:32:49] Signatures: Total: 140;  Enabled: 138
[04/29/16-23:32:49] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-23:32:49] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/29/16-23:56:13] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/29/16-23:56:13] --Signature list start--
[04/29/16-23:56:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/29/16-23:56:13] --Signature list end--
[04/29/16-23:56:13] Signatures: Total: 140;  Enabled: 138
[04/29/16-23:56:13] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/29/16-23:56:13] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-00:14:17] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-00:14:17] --Signature list start--
[04/30/16-00:14:17] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:14:17] --Signature list end--
[04/30/16-00:14:17] Signatures: Total: 140;  Enabled: 138
[04/30/16-00:14:17] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-00:14:17] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-00:32:50] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-00:32:50] --Signature list start--
[04/30/16-00:32:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:32:50] --Signature list end--
[04/30/16-00:32:50] Signatures: Total: 140;  Enabled: 138
[04/30/16-00:32:50] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-00:32:50] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-00:53:12] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-00:53:12] --Signature list start--
[04/30/16-00:53:12] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-00:53:12] --Signature list end--
[04/30/16-00:53:12] Signatures: Total: 140;  Enabled: 138
[04/30/16-00:53:12] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-00:53:12] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-01:14:17] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-01:14:17] --Signature list start--
[04/30/16-01:14:17] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:14:17] --Signature list end--
[04/30/16-01:14:17] Signatures: Total: 140;  Enabled: 138
[04/30/16-01:14:17] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-01:14:17] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-01:30:15] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-01:30:15] --Signature list start--
[04/30/16-01:30:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:30:15] --Signature list end--
[04/30/16-01:30:15] Signatures: Total: 140;  Enabled: 138
[04/30/16-01:30:15] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-01:30:15] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-01:49:09] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-01:49:09] --Signature list start--
[04/30/16-01:49:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:49:09] --Signature list end--
[04/30/16-01:49:09] Signatures: Total: 140;  Enabled: 138
[04/30/16-01:49:09] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-01:49:09] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-01:56:26] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-01:56:26] --Signature list start--
[04/30/16-01:56:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-01:56:26] --Signature list end--
[04/30/16-01:56:26] Signatures: Total: 140;  Enabled: 138
[04/30/16-01:56:26] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-01:56:26] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-02:02:50] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-02:02:50] --Signature list start--
[04/30/16-02:02:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:02:50] --Signature list end--
[04/30/16-02:02:50] Signatures: Total: 140;  Enabled: 138
[04/30/16-02:02:50] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-02:02:50] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-02:14:17] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-02:14:17] --Signature list start--
[04/30/16-02:14:17] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:14:17] --Signature list end--
[04/30/16-02:14:17] Signatures: Total: 140;  Enabled: 138
[04/30/16-02:14:17] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-02:14:17] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-02:32:35] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.60.0.0
[04/30/16-02:32:35] --Signature list start--
[04/30/16-02:32:35] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[04/30/16-02:32:35] --Signature list end--
[04/30/16-02:32:35] Signatures: Total: 140;  Enabled: 138
[04/30/16-02:32:35] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[04/30/16-02:32:35] New engine version=2.1.11804.0; New signature version=115.60.0.0
[04/30/16-03:08:24] Parse error - Cancel Inspection
[04/30/16-03:08:57] Parse error - Cancel Inspection
[04/30/16-03:30:09] Parse error - Cancel Inspection
[04/30/16-03:59:39] Parse error - Cancel Inspection
[04/30/16-04:55:20] Parse error - Cancel Inspection
[04/30/16-05:06:48] Parse error - Cancel Inspection
[04/30/16-05:50:24] Parse error - Cancel Inspection
[04/30/16-06:06:47] Parse error - Cancel Inspection
[04/30/16-06:21:41] Parse error - Cancel Inspection
[04/30/16-06:31:00] Parse error - Cancel Inspection
[04/30/16-07:01:11] Parse error - Cancel Inspection
[04/30/16-08:09:53] Parse error - Cancel Inspection
[04/30/16-08:40:22] Parse error - Cancel Inspection
[04/30/16-09:32:40] Parse error - Cancel Inspection
[04/30/16-09:34:20] Parse error - Cancel Inspection
[04/30/16-09:41:05] Parse error - Cancel Inspection
[04/30/16-09:54:37] Parse error - Cancel Inspection
[04/30/16-10:17:11] Parse error - Cancel Inspection
[04/30/16-10:25:53] Parse error - Cancel Inspection
[04/30/16-10:54:29] Parse error - Cancel Inspection
[04/30/16-11:04:11] Parse error - Cancel Inspection
[04/30/16-11:09:47] Parse error - Cancel Inspection
[04/30/16-11:21:11] Parse error - Cancel Inspection
[04/30/16-11:27:37] Parse error - Cancel Inspection
[04/30/16-11:40:21] Parse error - Cancel Inspection
[04/30/16-11:42:12] Parse error - Cancel Inspection
[04/30/16-12:10:29] Parse error - Cancel Inspection
[04/30/16-13:14:31] Parse error - Cancel Inspection
[04/30/16-13:16:34] Parse error - Cancel Inspection
[04/30/16-13:34:39] Parse error - Cancel Inspection
[04/30/16-13:45:11] Parse error - Cancel Inspection
[04/30/16-13:51:46] Parse error - Cancel Inspection
[04/30/16-14:21:08] Parse error - Cancel Inspection
[04/30/16-14:27:24] Parse error - Cancel Inspection
[04/30/16-14:32:20] Parse error - Cancel Inspection
[04/30/16-14:47:17] Parse error - Cancel Inspection
[05/01/16-22:35:58] Parse error - Cancel Inspection
[05/01/16-22:54:39] Parse error - Cancel Inspection
[05/01/16-23:01:49] Parse error - Cancel Inspection
[05/01/16-23:10:11] Parse error - Cancel Inspection
[05/01/16-23:14:19] Parse error - Cancel Inspection
[05/01/16-23:53:56] Parse error - Cancel Inspection
[05/02/16-01:04:42] Parse error - Cancel Inspection
[05/02/16-01:15:54] Parse error - Cancel Inspection
[05/02/16-01:40:07] Parse error - Cancel Inspection
[05/02/16-01:46:19] Parse error - Cancel Inspection
[05/02/16-02:30:26] Parse error - Cancel Inspection
[05/02/16-02:39:00] Parse error - Cancel Inspection
[05/02/16-02:50:39] Parse error - Cancel Inspection
[05/02/16-02:54:29] Parse error - Cancel Inspection
[05/02/16-03:01:10] Parse error - Cancel Inspection
[05/02/16-03:11:11] Parse error - Cancel Inspection
[05/02/16-03:30:18] Parse error - Cancel Inspection
[05/02/16-03:35:28] Parse error - Cancel Inspection
[05/02/16-03:40:12] Parse error - Cancel Inspection
[05/02/16-03:58:53] Parse error - Cancel Inspection
[05/02/16-04:58:20] Parse error - Cancel Inspection
[05/02/16-05:08:28] Parse error - Cancel Inspection
[05/02/16-05:13:18] Parse error - Cancel Inspection
[05/02/16-05:37:19] Parse error - Cancel Inspection
[05/02/16-05:38:57] Parse error - Cancel Inspection
[05/02/16-05:41:11] Parse error - Cancel Inspection
[05/02/16-06:36:51] Parse error - Cancel Inspection
[05/02/16-06:46:33] Parse error - Cancel Inspection
[05/02/16-07:48:07] Parse error - Cancel Inspection
[05/02/16-08:41:54] Parse error - Cancel Inspection
[05/02/16-08:58:35] Parse error - Cancel Inspection
[05/02/16-09:07:23] Parse error - Cancel Inspection
[05/02/16-09:17:45] Parse error - Cancel Inspection
[05/02/16-09:20:43] Parse error - Cancel Inspection
[05/02/16-09:44:58] Parse error - Cancel Inspection
[05/02/16-09:47:05] Parse error - Cancel Inspection
[05/02/16-10:18:42] Parse error - Cancel Inspection
[05/02/16-10:21:52] Parse error - Cancel Inspection
[05/02/16-10:28:28] Parse error - Cancel Inspection
[05/02/16-10:53:11] Parse error - Cancel Inspection
[05/02/16-10:54:16] Parse error - Cancel Inspection
[05/02/16-11:10:56] Parse error - Cancel Inspection
[05/02/16-11:12:48] Parse error - Cancel Inspection
[05/02/16-11:22:52] Parse error - Cancel Inspection
[05/02/16-11:30:50] Parse error - Cancel Inspection
[05/02/16-11:37:33] Parse error - Cancel Inspection
[05/02/16-11:42:28] Parse error - Cancel Inspection
[05/02/16-11:55:32] Parse error - Cancel Inspection
[05/02/16-12:25:20] Parse error - Cancel Inspection
[05/02/16-12:42:06] Parse error - Cancel Inspection
[05/02/16-13:11:14] Parse error - Cancel Inspection
[05/02/16-13:33:06] Parse error - Cancel Inspection
[05/02/16-13:46:28] Parse error - Cancel Inspection
[05/02/16-13:51:09] Parse error - Cancel Inspection
[05/02/16-13:57:36] Parse error - Cancel Inspection
[05/02/16-14:06:24] Parse error - Cancel Inspection
[05/02/16-14:50:49] Parse error - Cancel Inspection
[05/02/16-14:57:13] Parse error - Cancel Inspection
[05/02/16-15:01:59] Parse error - Cancel Inspection
[05/02/16-15:04:31] Parse error - Cancel Inspection
[05/02/16-15:06:55] Parse error - Cancel Inspection
[05/02/16-15:25:47] Parse error - Cancel Inspection
[05/02/16-15:44:08] Parse error - Cancel Inspection
[05/02/16-15:58:16] Parse error - Cancel Inspection
[05/02/16-16:10:51] Parse error - Cancel Inspection
[05/02/16-16:13:52] Parse error - Cancel Inspection
[05/02/16-16:14:03] Parse error - Cancel Inspection
[05/02/16-16:14:44] Parse error - Cancel Inspection
[05/02/16-16:18:33] Parse error - Cancel Inspection
[05/02/16-16:27:07] Parse error - Cancel Inspection
[05/02/16-16:30:13] Parse error - Cancel Inspection
[05/02/16-16:36:23] Parse error - Cancel Inspection
[05/02/16-17:00:07] Parse error - Cancel Inspection
[05/02/16-17:00:15] Parse error - Cancel Inspection
[05/02/16-17:04:14] Parse error - Cancel Inspection
[05/02/16-17:23:08] Parse error - Cancel Inspection
[05/02/16-17:48:40] Parse error - Cancel Inspection
[05/02/16-17:54:09] Parse error - Cancel Inspection
[05/02/16-17:55:06] Parse error - Cancel Inspection
[05/02/16-18:34:13] Parse error - Cancel Inspection
[05/02/16-18:39:14] Parse error - Cancel Inspection
[05/02/16-18:39:51] Parse error - Cancel Inspection
[05/02/16-18:46:39] Parse error - Cancel Inspection
[05/02/16-18:47:49] Parse error - Cancel Inspection
[05/02/16-18:48:22] Parse error - Cancel Inspection
[05/02/16-18:51:17] Parse error - Cancel Inspection
[05/02/16-19:16:33] Parse error - Cancel Inspection
[05/02/16-19:23:11] Parse error - Cancel Inspection
[05/02/16-19:27:03] Parse error - Cancel Inspection
[05/02/16-19:28:55] Parse error - Cancel Inspection
[05/02/16-19:38:22] Parse error - Cancel Inspection
[05/02/16-20:31:04] Parse error - Cancel Inspection
[05/02/16-21:09:38] Parse error - Cancel Inspection
[05/02/16-21:10:55] Parse error - Cancel Inspection
[05/02/16-22:04:30] Parse error - Cancel Inspection
[05/02/16-22:13:32] Parse error - Cancel Inspection
[05/02/16-22:19:43] Parse error - Cancel Inspection
[05/02/16-22:28:33] Parse error - Cancel Inspection
[05/02/16-22:31:32] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A37332A5-35C8-408E-AD0D-126412B45204}
[05/02/16-22:31:32] Win8+: overriding fZeroDayEnabled to FALSE
[05/02/16-22:31:32] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.61.0.0
[05/02/16-22:31:32] --Signature list start--
[05/02/16-22:31:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/02/16-22:31:32] --Signature list end--
[05/02/16-22:31:32] Signatures: Total: 140;  Enabled: 138
[05/02/16-22:31:32] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/02/16-22:31:32] New engine version=2.1.11804.0; New signature version=115.61.0.0
[05/02/16-22:31:32] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/02/16-22:31:32] At least one signature is active
[05/02/16-22:31:32] Already connected to the driver
[05/02/16-22:31:32] Load Definitions completed successfully.
[05/04/16-08:19:37] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6C531E40-6782-423E-A5D1-C4A2E50515F2}
[05/04/16-08:19:37] Win8+: overriding fZeroDayEnabled to FALSE
[05/04/16-08:19:37] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.62.0.0
[05/04/16-08:19:38] --Signature list start--
[05/04/16-08:19:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/04/16-08:19:38] --Signature list end--
[05/04/16-08:19:38] Signatures: Total: 140;  Enabled: 138
[05/04/16-08:19:38] Active signature breakdown: BM: 138; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/04/16-08:19:38] New engine version=2.1.11804.0; New signature version=115.62.0.0
[05/04/16-08:19:38] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/04/16-08:19:38] At least one signature is active
[05/04/16-08:19:38] Already connected to the driver
[05/04/16-08:19:38] Load Definitions completed successfully.
[05/04/16-10:00:18] Parse error - Cancel Inspection
[05/04/16-11:19:35] Parse error - Cancel Inspection
[05/04/16-11:53:46] Parse error - Cancel Inspection
[05/04/16-13:28:58] Parse error - Cancel Inspection
[05/04/16-14:22:11] Parse error - Cancel Inspection
[05/04/16-15:35:33] Parse error - Cancel Inspection
[05/04/16-16:36:27] Parse error - Cancel Inspection
[05/04/16-16:57:04] Parse error - Cancel Inspection
[05/04/16-16:59:50] Parse error - Cancel Inspection
[05/04/16-17:32:06] Parse error - Cancel Inspection
[05/04/16-18:30:48] Parse error - Cancel Inspection
[05/04/16-21:27:28] Parse error - Cancel Inspection
[05/04/16-21:59:08] Parse error - Cancel Inspection
[05/04/16-22:06:04] Parse error - Cancel Inspection
[05/05/16-01:25:15] Parse error - Cancel Inspection
[05/05/16-04:00:20] Parse error - Cancel Inspection
[05/05/16-05:14:34] Parse error - Cancel Inspection
[05/05/16-07:47:09] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{29DAA088-E524-46E8-963D-EA6D97B93111}
[05/05/16-07:47:09] Win8+: overriding fZeroDayEnabled to FALSE
[05/05/16-07:47:09] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.63.0.0
[05/05/16-07:47:09] --Signature list start--
[05/05/16-07:47:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/05/16-07:47:09] --Signature list end--
[05/05/16-07:47:09] Signatures: Total: 141;  Enabled: 139
[05/05/16-07:47:09] Active signature breakdown: BM: 139; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/05/16-07:47:09] New engine version=2.1.11804.0; New signature version=115.63.0.0
[05/05/16-07:47:10] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/05/16-07:47:10] At least one signature is active
[05/05/16-07:47:10] Already connected to the driver
[05/05/16-07:47:10] Load Definitions completed successfully.
[05/05/16-11:19:13] Parse error - Cancel Inspection
[05/05/16-13:09:51] Parse error - Cancel Inspection
[05/05/16-13:37:18] Parse error - Cancel Inspection
[05/05/16-19:45:00] Parse error - Cancel Inspection
[05/05/16-20:37:08] Parse error - Cancel Inspection
[05/05/16-22:12:30] Parse error - Cancel Inspection
[05/05/16-22:52:05] Parse error - Cancel Inspection
[05/06/16-00:14:28] Parse error - Cancel Inspection
[05/06/16-00:40:20] Parse error - Cancel Inspection
[05/06/16-02:14:51] Parse error - Cancel Inspection
[05/06/16-02:25:23] Parse error - Cancel Inspection
[05/06/16-02:30:31] Parse error - Cancel Inspection
[05/06/16-03:00:27] Parse error - Cancel Inspection
[05/06/16-04:29:47] Parse error - Cancel Inspection
[05/06/16-05:20:30] Parse error - Cancel Inspection
[05/06/16-05:39:50] Parse error - Cancel Inspection
[05/06/16-07:33:07] Parse error - Cancel Inspection
[05/06/16-11:02:11] Parse error - Cancel Inspection
[05/06/16-11:50:53] Parse error - Cancel Inspection
[05/06/16-15:41:52] Parse error - Cancel Inspection
[05/06/16-19:30:40] Parse error - Cancel Inspection
[05/07/16-01:56:09] Parse error - Cancel Inspection
[05/07/16-04:46:02] Parse error - Cancel Inspection
[05/07/16-11:31:00] Parse error - Cancel Inspection
[05/07/16-13:06:10] Parse error - Cancel Inspection
[05/07/16-15:21:18] Parse error - Cancel Inspection
[05/07/16-16:27:31] Parse error - Cancel Inspection
[05/07/16-18:03:50] Parse error - Cancel Inspection
[05/07/16-20:32:17] Parse error - Cancel Inspection
[05/07/16-21:48:03] Parse error - Cancel Inspection
[05/07/16-23:48:49] Parse error - Cancel Inspection
[05/08/16-00:38:38] Parse error - Cancel Inspection
[05/08/16-02:42:42] Parse error - Cancel Inspection
[05/08/16-03:29:58] Parse error - Cancel Inspection
[05/08/16-04:08:22] Parse error - Cancel Inspection
[05/08/16-04:18:13] Parse error - Cancel Inspection
[05/08/16-04:58:23] Parse error - Cancel Inspection
[05/08/16-06:08:13] Parse error - Cancel Inspection
[05/08/16-15:25:06] Parse error - Cancel Inspection
[05/08/16-15:59:05] Parse error - Cancel Inspection
[05/08/16-16:39:45] Parse error - Cancel Inspection
[05/08/16-17:04:32] Parse error - Cancel Inspection
[05/09/16-12:39:43] Parse error - Cancel Inspection
[05/09/16-17:56:53] Parse error - Cancel Inspection
[05/10/16-18:16:57] Parse error - Cancel Inspection
[05/11/16-09:25:31] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{79BA1D46-62A7-4B7B-9613-24B17B5DAECE}
[05/11/16-09:25:31] Win8+: overriding fZeroDayEnabled to FALSE
[05/11/16-09:25:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.1.0.0
[05/11/16-09:25:31] --Signature list start--
[05/11/16-09:25:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/11/16-09:25:31] --Signature list end--
[05/11/16-09:25:31] Signatures: Total: 142;  Enabled: 140
[05/11/16-09:25:31] Active signature breakdown: BM: 140; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/11/16-09:25:31] New engine version=2.1.12706.0; New signature version=116.1.0.0
[05/11/16-09:25:33] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/11/16-09:25:33] At least one signature is active
[05/11/16-09:25:33] Already connected to the driver
[05/11/16-09:25:33] Load Definitions completed successfully.
[05/11/16-11:26:05] Parse error - Cancel Inspection
[05/11/16-11:26:05] Parse error - Cancel Inspection
[05/11/16-11:26:05] Parse error - Cancel Inspection
[05/11/16-11:26:05] Parse error - Cancel Inspection
[05/11/16-12:06:19] Parse error - Cancel Inspection
[05/11/16-12:06:19] Parse error - Cancel Inspection
[05/11/16-12:07:12] Parse error - Cancel Inspection
[05/11/16-12:07:12] Parse error - Cancel Inspection
[05/11/16-12:07:12] Parse error - Cancel Inspection
[05/11/16-12:56:00] Parse error - Cancel Inspection
[05/11/16-12:56:00] Parse error - Cancel Inspection
[05/11/16-13:01:18] Parse error - Cancel Inspection
[05/11/16-13:25:08] Parse error - Cancel Inspection
[05/11/16-13:25:42] Parse error - Cancel Inspection
[05/11/16-13:25:42] Parse error - Cancel Inspection
[05/11/16-13:54:50] Parse error - Cancel Inspection
[05/11/16-16:24:22] Parse error - Cancel Inspection
[05/11/16-16:24:22] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-16:24:24] Parse error - Cancel Inspection
[05/11/16-20:21:20] Parse error - Cancel Inspection
[05/11/16-20:21:20] Parse error - Cancel Inspection
[05/11/16-22:17:44] Parse error - Cancel Inspection
[05/11/16-22:17:44] Parse error - Cancel Inspection
[05/11/16-22:56:24] Parse error - Cancel Inspection
[05/11/16-22:56:24] Parse error - Cancel Inspection
[05/11/16-23:03:23] Parse error - Cancel Inspection
[05/11/16-23:03:23] Parse error - Cancel Inspection
[05/11/16-23:26:03] Parse error - Cancel Inspection
[05/11/16-23:26:03] Parse error - Cancel Inspection
[05/11/16-23:28:15] Parse error - Cancel Inspection
[05/11/16-23:43:49] Parse error - Cancel Inspection
[05/12/16-00:27:16] Parse error - Cancel Inspection
[05/12/16-04:04:00] *********************************************
[05/12/16-04:04:00] Network Inspection System service starting.
[05/12/16-04:04:00] Version: 4.8.10240.16384
[05/12/16-04:04:00] *********************************************
[05/12/16-04:04:00] Service started by NisIpsPlugin
[05/12/16-04:04:00] Service started
[05/12/16-04:04:01] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{79BA1D46-62A7-4B7B-9613-24B17B5DAECE}
[05/12/16-04:04:01] Win8+: overriding fZeroDayEnabled to FALSE
[05/12/16-04:04:01] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.1.0.0
[05/12/16-04:04:02] --Signature list start--
[05/12/16-04:04:02] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-04:04:02] --Signature list end--
[05/12/16-04:04:02] Signatures: Total: 142;  Enabled: 140
[05/12/16-04:04:02] Active signature breakdown: BM: 140; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/12/16-04:04:02] New engine version=2.1.12706.0; New signature version=116.1.0.0
[05/12/16-04:04:02] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/12/16-04:04:02] At least one signature is active
[05/12/16-04:04:02] Connecting to the driver
[05/12/16-04:04:02] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/12/16-04:04:02] Load Definitions completed successfully.
[05/12/16-07:32:43] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.1.0.0
[05/12/16-07:32:44] --Signature list start--
[05/12/16-07:32:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/12/16-07:32:44] --Signature list end--
[05/12/16-07:32:44] Signatures: Total: 142;  Enabled: 140
[05/12/16-07:32:44] Active signature breakdown: BM: 140; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/12/16-07:32:44] New engine version=2.1.12706.0; New signature version=116.1.0.0
[05/16/16-02:34:22] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.1.0.0
[05/16/16-02:34:22] --Signature list start--
[05/16/16-02:34:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/16/16-02:34:22] --Signature list end--
[05/16/16-02:34:22] Signatures: Total: 142;  Enabled: 140
[05/16/16-02:34:22] Active signature breakdown: BM: 140; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/16/16-02:34:22] New engine version=2.1.12706.0; New signature version=116.1.0.0
[05/16/16-02:41:36] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:15:27] Parse error - Cancel Inspection
[05/16/16-16:18:24] Parse error - Cancel Inspection
[05/16/16-16:18:24] Parse error - Cancel Inspection
[05/16/16-16:20:10] Parse error - Cancel Inspection
[05/16/16-16:20:10] Parse error - Cancel Inspection
[05/16/16-16:20:11] Parse error - Cancel Inspection
[05/16/16-16:20:11] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-16:22:18] Parse error - Cancel Inspection
[05/16/16-17:13:51] Parse error - Cancel Inspection
[05/16/16-17:13:51] Parse error - Cancel Inspection
[05/16/16-17:13:58] Parse error - Cancel Inspection
[05/16/16-17:13:58] Parse error - Cancel Inspection
[05/16/16-17:13:58] Parse error - Cancel Inspection
[05/16/16-17:13:58] Parse error - Cancel Inspection
[05/16/16-17:13:58] Parse error - Cancel Inspection
[05/16/16-17:14:10] Parse error - Cancel Inspection
[05/16/16-17:14:10] Parse error - Cancel Inspection
[05/16/16-17:14:10] Parse error - Cancel Inspection
[05/16/16-17:14:10] Parse error - Cancel Inspection
[05/16/16-17:14:10] Parse error - Cancel Inspection
[05/16/16-17:14:10] Parse error - Cancel Inspection
[05/16/16-17:21:33] Parse error - Cancel Inspection
[05/16/16-17:21:33] Parse error - Cancel Inspection
[05/16/16-17:21:59] Parse error - Cancel Inspection
[05/16/16-17:21:59] Parse error - Cancel Inspection
[05/16/16-17:28:35] Parse error - Cancel Inspection
[05/16/16-17:28:35] Parse error - Cancel Inspection
[05/16/16-17:36:30] Parse error - Cancel Inspection
[05/16/16-17:36:30] Parse error - Cancel Inspection
[05/16/16-17:37:43] Parse error - Cancel Inspection
[05/16/16-17:37:43] Parse error - Cancel Inspection
[05/16/16-17:40:06] Parse error - Cancel Inspection
[05/16/16-17:40:06] Parse error - Cancel Inspection
[05/16/16-17:40:06] Parse error - Cancel Inspection
[05/16/16-17:40:06] Parse error - Cancel Inspection
[05/16/16-17:42:49] Parse error - Cancel Inspection
[05/16/16-17:45:22] Parse error - Cancel Inspection
[05/16/16-17:45:32] Parse error - Cancel Inspection
[05/16/16-17:45:32] Parse error - Cancel Inspection
[05/16/16-17:49:49] Parse error - Cancel Inspection
[05/16/16-18:05:12] Parse error - Cancel Inspection
[05/16/16-18:05:12] Parse error - Cancel Inspection
[05/16/16-18:14:52] Parse error - Cancel Inspection
[05/16/16-18:14:52] Parse error - Cancel Inspection
[05/17/16-06:52:14] *********************************************
[05/17/16-06:52:14] Network Inspection System service starting.
[05/17/16-06:52:14] Version: 4.8.10240.16384
[05/17/16-06:52:14] *********************************************
[05/17/16-06:52:14] Service started by NisIpsPlugin
[05/17/16-06:52:14] Service started
[05/17/16-06:52:15] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{79BA1D46-62A7-4B7B-9613-24B17B5DAECE}
[05/17/16-06:52:15] Win8+: overriding fZeroDayEnabled to FALSE
[05/17/16-06:52:15] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.1.0.0
[05/17/16-06:52:16] --Signature list start--
[05/17/16-06:52:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-06:52:16] --Signature list end--
[05/17/16-06:52:16] Signatures: Total: 142;  Enabled: 140
[05/17/16-06:52:16] Active signature breakdown: BM: 140; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/17/16-06:52:16] New engine version=2.1.12706.0; New signature version=116.1.0.0
[05/17/16-06:52:16] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/17/16-06:52:16] At least one signature is active
[05/17/16-06:52:16] Connecting to the driver
[05/17/16-06:52:16] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/17/16-06:52:16] Load Definitions completed successfully.
[05/17/16-07:19:27] Parse error - Cancel Inspection
[05/17/16-10:22:11] Parse error - Cancel Inspection
[05/17/16-10:48:38] *********************************************
[05/17/16-10:48:39] Network Inspection System service starting.
[05/17/16-10:48:39] Version: 4.8.10240.16384
[05/17/16-10:48:39] *********************************************
[05/17/16-10:48:39] Service started by NisIpsPlugin
[05/17/16-10:48:39] Service started
[05/17/16-10:48:45] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{79BA1D46-62A7-4B7B-9613-24B17B5DAECE}
[05/17/16-10:48:45] Win8+: overriding fZeroDayEnabled to FALSE
[05/17/16-10:48:46] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.1.0.0
[05/17/16-10:48:47] --Signature list start--
[05/17/16-10:48:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/17/16-10:48:47] --Signature list end--
[05/17/16-10:48:47] Signatures: Total: 142;  Enabled: 140
[05/17/16-10:48:47] Active signature breakdown: BM: 140; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/17/16-10:48:47] New engine version=2.1.12706.0; New signature version=116.1.0.0
[05/17/16-10:48:47] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/17/16-10:48:47] At least one signature is active
[05/17/16-10:48:47] Connecting to the driver
[05/17/16-10:48:47] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/17/16-10:48:47] Load Definitions completed successfully.
[05/17/16-10:54:43] Parse error - Cancel Inspection
[05/17/16-14:25:29] Parse error - Cancel Inspection
[05/17/16-14:29:19] Parse error - Cancel Inspection
[05/17/16-15:40:54] Parse error - Cancel Inspection
[05/17/16-16:52:00] Parse error - Cancel Inspection
[05/17/16-20:18:05] Parse error - Cancel Inspection
[05/17/16-21:47:26] Parse error - Cancel Inspection
[05/18/16-11:46:28] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F68DEF7-8EEF-4035-A02D-047A5E9D5857}
[05/18/16-11:46:28] Win8+: overriding fZeroDayEnabled to FALSE
[05/18/16-11:46:28] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.2.0.0
[05/18/16-11:46:29] --Signature list start--
[05/18/16-11:46:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-11:46:29] --Signature list end--
[05/18/16-11:46:29] Signatures: Total: 143;  Enabled: 141
[05/18/16-11:46:29] Active signature breakdown: BM: 141; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/18/16-11:46:29] New engine version=2.1.12706.0; New signature version=116.2.0.0
[05/18/16-11:46:29] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/18/16-11:46:29] At least one signature is active
[05/18/16-11:46:29] Already connected to the driver
[05/18/16-11:46:29] Load Definitions completed successfully.
[05/18/16-12:48:12] Parse error - Cancel Inspection
[05/18/16-22:55:46] *********************************************
[05/18/16-22:55:46] Network Inspection System service starting.
[05/18/16-22:55:46] Version: 4.8.10240.16384
[05/18/16-22:55:46] *********************************************
[05/18/16-22:55:46] Service started by NisIpsPlugin
[05/18/16-22:55:46] Service started
[05/18/16-22:55:46] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6F68DEF7-8EEF-4035-A02D-047A5E9D5857}
[05/18/16-22:55:46] Win8+: overriding fZeroDayEnabled to FALSE
[05/18/16-22:55:46] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.2.0.0
[05/18/16-22:55:47] --Signature list start--
[05/18/16-22:55:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/18/16-22:55:47] --Signature list end--
[05/18/16-22:55:47] Signatures: Total: 143;  Enabled: 141
[05/18/16-22:55:47] Active signature breakdown: BM: 141; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/18/16-22:55:47] New engine version=2.1.12706.0; New signature version=116.2.0.0
[05/18/16-22:55:47] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/18/16-22:55:47] At least one signature is active
[05/18/16-22:55:47] Connecting to the driver
[05/18/16-22:55:47] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/18/16-22:55:47] Load Definitions completed successfully.
[05/18/16-22:58:01] Parse error - Cancel Inspection
[05/18/16-23:30:32] Parse error - Cancel Inspection
[05/22/16-22:46:11] Parse error - Cancel Inspection
[05/22/16-22:50:07] Parse error - Cancel Inspection
[05/22/16-22:53:12] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/22/16-22:53:12] Win8+: overriding fZeroDayEnabled to FALSE
[05/22/16-22:53:12] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/22/16-22:53:12] --Signature list start--
[05/22/16-22:53:12] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/22/16-22:53:13] --Signature list end--
[05/22/16-22:53:13] Signatures: Total: 144;  Enabled: 142
[05/22/16-22:53:13] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/22/16-22:53:13] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/22/16-22:53:13] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/22/16-22:53:13] At least one signature is active
[05/22/16-22:53:13] Already connected to the driver
[05/22/16-22:53:13] Load Definitions completed successfully.
[05/23/16-10:42:09] *********************************************
[05/23/16-10:42:09] Network Inspection System service starting.
[05/23/16-10:42:09] Version: 4.8.10240.16384
[05/23/16-10:42:09] *********************************************
[05/23/16-10:42:09] Service started by NisIpsPlugin
[05/23/16-10:42:09] Service started
[05/23/16-10:42:09] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/23/16-10:42:09] Win8+: overriding fZeroDayEnabled to FALSE
[05/23/16-10:42:09] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-10:42:10] --Signature list start--
[05/23/16-10:42:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:42:10] --Signature list end--
[05/23/16-10:42:10] Signatures: Total: 144;  Enabled: 142
[05/23/16-10:42:10] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-10:42:10] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-10:42:10] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/23/16-10:42:10] At least one signature is active
[05/23/16-10:42:10] Connecting to the driver
[05/23/16-10:42:10] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/23/16-10:42:10] Load Definitions completed successfully.
[05/23/16-10:58:01] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-10:58:01] --Signature list start--
[05/23/16-10:58:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-10:58:01] --Signature list end--
[05/23/16-10:58:01] Signatures: Total: 144;  Enabled: 142
[05/23/16-10:58:01] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-10:58:01] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-11:11:59] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-11:12:00] --Signature list start--
[05/23/16-11:12:00] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:12:00] --Signature list end--
[05/23/16-11:12:00] Signatures: Total: 144;  Enabled: 142
[05/23/16-11:12:00] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-11:12:00] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-11:24:58] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-11:24:58] --Signature list start--
[05/23/16-11:24:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-11:24:58] --Signature list end--
[05/23/16-11:24:58] Signatures: Total: 144;  Enabled: 142
[05/23/16-11:24:58] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-11:24:58] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-12:29:30] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-12:29:31] --Signature list start--
[05/23/16-12:29:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:29:31] --Signature list end--
[05/23/16-12:29:31] Signatures: Total: 144;  Enabled: 142
[05/23/16-12:29:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-12:29:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-12:37:18] *********************************************
[05/23/16-12:37:18] Network Inspection System service starting.
[05/23/16-12:37:18] Version: 4.8.10240.16384
[05/23/16-12:37:18] *********************************************
[05/23/16-12:37:18] Service started by NisIpsPlugin
[05/23/16-12:37:18] Service started
[05/23/16-12:37:18] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/23/16-12:37:18] Win8+: overriding fZeroDayEnabled to FALSE
[05/23/16-12:37:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-12:37:19] --Signature list start--
[05/23/16-12:37:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:37:19] --Signature list end--
[05/23/16-12:37:19] Signatures: Total: 144;  Enabled: 142
[05/23/16-12:37:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-12:37:19] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-12:37:19] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/23/16-12:37:19] At least one signature is active
[05/23/16-12:37:19] Connecting to the driver
[05/23/16-12:37:19] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/23/16-12:37:19] Load Definitions completed successfully.
[05/23/16-12:47:44] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-12:47:44] --Signature list start--
[05/23/16-12:47:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-12:47:44] --Signature list end--
[05/23/16-12:47:44] Signatures: Total: 144;  Enabled: 142
[05/23/16-12:47:44] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-12:47:44] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-12:47:57] Parse error - Cancel Inspection
[05/23/16-12:48:01] Parse error - Cancel Inspection
[05/23/16-12:48:01] Parse error - Cancel Inspection
[05/23/16-13:31:20] Parse error - Cancel Inspection
[05/23/16-13:46:37] *********************************************
[05/23/16-13:46:37] Network Inspection System service starting.
[05/23/16-13:46:37] Version: 4.8.10240.16384
[05/23/16-13:46:37] *********************************************
[05/23/16-13:46:37] Service started by NisIpsPlugin
[05/23/16-13:46:37] Service started
[05/23/16-13:46:37] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/23/16-13:46:37] Win8+: overriding fZeroDayEnabled to FALSE
[05/23/16-13:46:38] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-13:46:38] --Signature list start--
[05/23/16-13:46:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-13:46:38] --Signature list end--
[05/23/16-13:46:38] Signatures: Total: 144;  Enabled: 142
[05/23/16-13:46:38] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-13:46:38] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-13:46:38] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/23/16-13:46:38] At least one signature is active
[05/23/16-13:46:38] Connecting to the driver
[05/23/16-13:46:38] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/23/16-13:46:38] Load Definitions completed successfully.
[05/23/16-14:02:08] *********************************************
[05/23/16-14:02:08] Network Inspection System service starting.
[05/23/16-14:02:08] Version: 4.8.10240.16384
[05/23/16-14:02:08] *********************************************
[05/23/16-14:02:08] Service started by NisIpsPlugin
[05/23/16-14:02:08] Service started
[05/23/16-14:02:08] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/23/16-14:02:08] Win8+: overriding fZeroDayEnabled to FALSE
[05/23/16-14:02:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-14:02:08] --Signature list start--
[05/23/16-14:02:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:02:08] --Signature list end--
[05/23/16-14:02:08] Signatures: Total: 144;  Enabled: 142
[05/23/16-14:02:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-14:02:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-14:02:08] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/23/16-14:02:08] At least one signature is active
[05/23/16-14:02:08] Connecting to the driver
[05/23/16-14:02:08] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/23/16-14:02:08] Load Definitions completed successfully.
[05/23/16-14:10:17] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-14:10:18] --Signature list start--
[05/23/16-14:10:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:10:18] --Signature list end--
[05/23/16-14:10:18] Signatures: Total: 144;  Enabled: 142
[05/23/16-14:10:18] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-14:10:18] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-14:17:49] *********************************************
[05/23/16-14:17:49] Network Inspection System service starting.
[05/23/16-14:17:49] Version: 4.8.10240.16384
[05/23/16-14:17:49] *********************************************
[05/23/16-14:17:49] Service started by NisIpsPlugin
[05/23/16-14:17:49] Service started
[05/23/16-14:17:49] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/23/16-14:17:49] Win8+: overriding fZeroDayEnabled to FALSE
[05/23/16-14:17:49] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-14:17:50] --Signature list start--
[05/23/16-14:17:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-14:17:50] --Signature list end--
[05/23/16-14:17:50] Signatures: Total: 144;  Enabled: 142
[05/23/16-14:17:50] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-14:17:50] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-14:17:50] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/23/16-14:17:50] At least one signature is active
[05/23/16-14:17:50] Connecting to the driver
[05/23/16-14:17:50] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/23/16-14:17:50] Load Definitions completed successfully.
[05/23/16-17:47:24] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-17:47:25] --Signature list start--
[05/23/16-17:47:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-17:47:25] --Signature list end--
[05/23/16-17:47:25] Signatures: Total: 144;  Enabled: 142
[05/23/16-17:47:25] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-17:47:25] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-19:53:10] Parse error - Cancel Inspection
[05/23/16-20:46:33] *********************************************
[05/23/16-20:46:33] Network Inspection System service starting.
[05/23/16-20:46:33] Version: 4.8.10240.16384
[05/23/16-20:46:33] *********************************************
[05/23/16-20:46:33] Service started by NisIpsPlugin
[05/23/16-20:46:33] Service started
[05/23/16-20:46:34] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/23/16-20:46:34] Win8+: overriding fZeroDayEnabled to FALSE
[05/23/16-20:46:34] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-20:46:34] --Signature list start--
[05/23/16-20:46:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-20:46:34] --Signature list end--
[05/23/16-20:46:34] Signatures: Total: 144;  Enabled: 142
[05/23/16-20:46:34] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-20:46:34] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/23/16-20:46:34] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/23/16-20:46:34] At least one signature is active
[05/23/16-20:46:34] Connecting to the driver
[05/23/16-20:46:34] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/23/16-20:46:34] Load Definitions completed successfully.
[05/23/16-23:14:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/23/16-23:14:32] --Signature list start--
[05/23/16-23:14:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/23/16-23:14:32] --Signature list end--
[05/23/16-23:14:32] Signatures: Total: 144;  Enabled: 142
[05/23/16-23:14:32] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/23/16-23:14:32] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/24/16-02:45:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/24/16-02:45:00] --Signature list start--
[05/24/16-02:45:00] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/24/16-02:45:00] --Signature list end--
[05/24/16-02:45:00] Signatures: Total: 144;  Enabled: 142
[05/24/16-02:45:00] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/24/16-02:45:00] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/24/16-10:10:31] Parse error - Cancel Inspection
[05/24/16-10:44:47] Parse error - Cancel Inspection
[05/24/16-11:34:05] Parse error - Cancel Inspection
[05/24/16-11:59:39] Parse error - Cancel Inspection
[05/24/16-13:12:08] Parse error - Cancel Inspection
[05/24/16-15:39:23] Parse error - Cancel Inspection
[05/24/16-15:52:29] Parse error - Cancel Inspection
[05/24/16-15:58:27] Parse error - Cancel Inspection
[05/24/16-16:07:27] Parse error - Cancel Inspection
[05/24/16-17:00:25] Parse error - Cancel Inspection
[05/25/16-07:25:28] Parse error - Cancel Inspection
[05/25/16-07:25:28] Parse error - Cancel Inspection
[05/25/16-07:33:01] Parse error - Cancel Inspection
[05/25/16-08:08:14] Parse error - Cancel Inspection
[05/25/16-08:19:10] Parse error - Cancel Inspection
[05/25/16-23:00:22] *********************************************
[05/25/16-23:00:22] Network Inspection System service starting.
[05/25/16-23:00:22] Version: 4.8.10240.16384
[05/25/16-23:00:22] *********************************************
[05/25/16-23:00:22] Service started by NisIpsPlugin
[05/25/16-23:00:22] Service started
[05/25/16-23:00:44] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/25/16-23:00:44] Win8+: overriding fZeroDayEnabled to FALSE
[05/25/16-23:00:44] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/25/16-23:00:45] --Signature list start--
[05/25/16-23:00:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/25/16-23:00:45] --Signature list end--
[05/25/16-23:00:45] Signatures: Total: 144;  Enabled: 142
[05/25/16-23:00:45] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/25/16-23:00:45] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/25/16-23:00:45] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/25/16-23:00:45] At least one signature is active
[05/25/16-23:00:45] Connecting to the driver
[05/25/16-23:00:45] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/25/16-23:00:45] Load Definitions completed successfully.
[05/26/16-06:32:09] *********************************************
[05/26/16-06:32:09] Network Inspection System service starting.
[05/26/16-06:32:09] Version: 4.8.10240.16384
[05/26/16-06:32:09] *********************************************
[05/26/16-06:32:09] Service started by NisIpsPlugin
[05/26/16-06:32:09] Service started
[05/26/16-06:32:10] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/26/16-06:32:10] Win8+: overriding fZeroDayEnabled to FALSE
[05/26/16-06:32:10] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/26/16-06:32:10] --Signature list start--
[05/26/16-06:32:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-06:32:10] --Signature list end--
[05/26/16-06:32:10] Signatures: Total: 144;  Enabled: 142
[05/26/16-06:32:10] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/26/16-06:32:10] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/26/16-06:32:10] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/26/16-06:32:10] At least one signature is active
[05/26/16-06:32:10] Connecting to the driver
[05/26/16-06:32:10] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/26/16-06:32:10] Load Definitions completed successfully.
[05/26/16-07:02:13] *********************************************
[05/26/16-07:02:13] Network Inspection System service starting.
[05/26/16-07:02:13] Version: 4.8.10240.16384
[05/26/16-07:02:13] *********************************************
[05/26/16-07:02:13] Service started by NisIpsPlugin
[05/26/16-07:02:13] Service started
[05/26/16-07:02:13] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/26/16-07:02:13] Win8+: overriding fZeroDayEnabled to FALSE
[05/26/16-07:02:13] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/26/16-07:02:14] --Signature list start--
[05/26/16-07:02:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:02:14] --Signature list end--
[05/26/16-07:02:14] Signatures: Total: 144;  Enabled: 142
[05/26/16-07:02:14] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/26/16-07:02:14] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/26/16-07:02:14] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/26/16-07:02:14] At least one signature is active
[05/26/16-07:02:14] Connecting to the driver
[05/26/16-07:02:14] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/26/16-07:02:14] Load Definitions completed successfully.
[05/26/16-07:30:50] *********************************************
[05/26/16-07:30:50] Network Inspection System service starting.
[05/26/16-07:30:50] Version: 4.8.10240.16384
[05/26/16-07:30:50] *********************************************
[05/26/16-07:30:50] Service started by NisIpsPlugin
[05/26/16-07:30:50] Service started
[05/26/16-07:30:50] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/26/16-07:30:50] Win8+: overriding fZeroDayEnabled to FALSE
[05/26/16-07:30:50] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/26/16-07:30:50] --Signature list start--
[05/26/16-07:30:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-07:30:50] --Signature list end--
[05/26/16-07:30:50] Signatures: Total: 144;  Enabled: 142
[05/26/16-07:30:50] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/26/16-07:30:50] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/26/16-07:30:50] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/26/16-07:30:50] At least one signature is active
[05/26/16-07:30:50] Connecting to the driver
[05/26/16-07:30:50] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/26/16-07:30:50] Load Definitions completed successfully.
[05/26/16-11:00:26] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/26/16-11:00:27] --Signature list start--
[05/26/16-11:00:27] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/26/16-11:00:27] --Signature list end--
[05/26/16-11:00:27] Signatures: Total: 144;  Enabled: 142
[05/26/16-11:00:27] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/26/16-11:00:27] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-03:16:33] *********************************************
[05/27/16-03:16:33] Network Inspection System service starting.
[05/27/16-03:16:33] Version: 4.8.10240.16384
[05/27/16-03:16:33] *********************************************
[05/27/16-03:16:33] Service started by NisIpsPlugin
[05/27/16-03:16:33] Service started
[05/27/16-03:16:34] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-03:16:34] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-03:16:34] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-03:16:34] --Signature list start--
[05/27/16-03:16:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:16:34] --Signature list end--
[05/27/16-03:16:34] Signatures: Total: 144;  Enabled: 142
[05/27/16-03:16:34] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-03:16:34] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-03:16:34] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-03:16:34] At least one signature is active
[05/27/16-03:16:34] Connecting to the driver
[05/27/16-03:16:34] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-03:16:34] Load Definitions completed successfully.
[05/27/16-03:43:12] *********************************************
[05/27/16-03:43:12] Network Inspection System service starting.
[05/27/16-03:43:12] Version: 4.8.10240.16384
[05/27/16-03:43:12] *********************************************
[05/27/16-03:43:12] Service started by NisIpsPlugin
[05/27/16-03:43:12] Service started
[05/27/16-03:43:12] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-03:43:12] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-03:43:12] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-03:43:12] --Signature list start--
[05/27/16-03:43:12] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-03:43:12] --Signature list end--
[05/27/16-03:43:12] Signatures: Total: 144;  Enabled: 142
[05/27/16-03:43:12] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-03:43:12] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-03:43:12] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-03:43:12] At least one signature is active
[05/27/16-03:43:12] Connecting to the driver
[05/27/16-03:43:12] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-03:43:12] Load Definitions completed successfully.
[05/27/16-04:07:56] *********************************************
[05/27/16-04:07:56] Network Inspection System service starting.
[05/27/16-04:07:56] Version: 4.8.10240.16384
[05/27/16-04:07:56] *********************************************
[05/27/16-04:07:56] Service started by NisIpsPlugin
[05/27/16-04:07:56] Service started
[05/27/16-04:07:56] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-04:07:56] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-04:07:56] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-04:07:57] --Signature list start--
[05/27/16-04:07:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:07:57] --Signature list end--
[05/27/16-04:07:57] Signatures: Total: 144;  Enabled: 142
[05/27/16-04:07:57] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-04:07:57] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-04:07:57] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-04:07:57] At least one signature is active
[05/27/16-04:07:57] Connecting to the driver
[05/27/16-04:07:57] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-04:07:57] Load Definitions completed successfully.
[05/27/16-04:32:35] *********************************************
[05/27/16-04:32:35] Network Inspection System service starting.
[05/27/16-04:32:35] Version: 4.8.10240.16384
[05/27/16-04:32:35] *********************************************
[05/27/16-04:32:35] Service started by NisIpsPlugin
[05/27/16-04:32:35] Service started
[05/27/16-04:32:36] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-04:32:36] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-04:32:36] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-04:32:36] --Signature list start--
[05/27/16-04:32:36] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:32:36] --Signature list end--
[05/27/16-04:32:36] Signatures: Total: 144;  Enabled: 142
[05/27/16-04:32:36] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-04:32:36] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-04:32:36] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-04:32:36] At least one signature is active
[05/27/16-04:32:36] Connecting to the driver
[05/27/16-04:32:36] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-04:32:36] Load Definitions completed successfully.
[05/27/16-04:57:17] *********************************************
[05/27/16-04:57:17] Network Inspection System service starting.
[05/27/16-04:57:17] Version: 4.8.10240.16384
[05/27/16-04:57:17] *********************************************
[05/27/16-04:57:17] Service started by NisIpsPlugin
[05/27/16-04:57:17] Service started
[05/27/16-04:57:17] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-04:57:17] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-04:57:17] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-04:57:17] --Signature list start--
[05/27/16-04:57:17] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-04:57:17] --Signature list end--
[05/27/16-04:57:17] Signatures: Total: 144;  Enabled: 142
[05/27/16-04:57:17] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-04:57:17] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-04:57:17] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-04:57:17] At least one signature is active
[05/27/16-04:57:17] Connecting to the driver
[05/27/16-04:57:17] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-04:57:17] Load Definitions completed successfully.
[05/27/16-05:25:00] *********************************************
[05/27/16-05:25:00] Network Inspection System service starting.
[05/27/16-05:25:00] Version: 4.8.10240.16384
[05/27/16-05:25:00] *********************************************
[05/27/16-05:25:00] Service started by NisIpsPlugin
[05/27/16-05:25:00] Service started
[05/27/16-05:25:00] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-05:25:00] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-05:25:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-05:25:01] --Signature list start--
[05/27/16-05:25:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:25:01] --Signature list end--
[05/27/16-05:25:01] Signatures: Total: 144;  Enabled: 142
[05/27/16-05:25:01] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-05:25:01] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-05:25:01] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-05:25:01] At least one signature is active
[05/27/16-05:25:01] Connecting to the driver
[05/27/16-05:25:01] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-05:25:01] Load Definitions completed successfully.
[05/27/16-05:52:40] *********************************************
[05/27/16-05:52:40] Network Inspection System service starting.
[05/27/16-05:52:40] Version: 4.8.10240.16384
[05/27/16-05:52:40] *********************************************
[05/27/16-05:52:40] Service started by NisIpsPlugin
[05/27/16-05:52:40] Service started
[05/27/16-05:52:40] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-05:52:40] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-05:52:40] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-05:52:40] --Signature list start--
[05/27/16-05:52:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-05:52:40] --Signature list end--
[05/27/16-05:52:40] Signatures: Total: 144;  Enabled: 142
[05/27/16-05:52:40] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-05:52:40] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-05:52:40] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-05:52:40] At least one signature is active
[05/27/16-05:52:40] Connecting to the driver
[05/27/16-05:52:40] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-05:52:40] Load Definitions completed successfully.
[05/27/16-06:29:33] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-06:29:33] --Signature list start--
[05/27/16-06:29:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:29:33] --Signature list end--
[05/27/16-06:29:33] Signatures: Total: 144;  Enabled: 142
[05/27/16-06:29:33] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-06:29:33] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-06:31:22] *********************************************
[05/27/16-06:31:22] Network Inspection System service starting.
[05/27/16-06:31:22] Version: 4.8.10240.16384
[05/27/16-06:31:22] *********************************************
[05/27/16-06:31:22] Service started by NisIpsPlugin
[05/27/16-06:31:22] Service started
[05/27/16-06:31:23] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-06:31:23] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-06:31:23] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-06:31:23] --Signature list start--
[05/27/16-06:31:23] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:31:23] --Signature list end--
[05/27/16-06:31:23] Signatures: Total: 144;  Enabled: 142
[05/27/16-06:31:23] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-06:31:23] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-06:31:23] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-06:31:23] At least one signature is active
[05/27/16-06:31:23] Connecting to the driver
[05/27/16-06:31:23] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-06:31:23] Load Definitions completed successfully.
[05/27/16-06:41:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-06:41:29] --Signature list start--
[05/27/16-06:41:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-06:41:29] --Signature list end--
[05/27/16-06:41:29] Signatures: Total: 144;  Enabled: 142
[05/27/16-06:41:29] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-06:41:29] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-07:14:32] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-07:14:34] --Signature list start--
[05/27/16-07:14:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:14:34] --Signature list end--
[05/27/16-07:14:34] Signatures: Total: 144;  Enabled: 142
[05/27/16-07:14:34] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-07:14:34] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-07:16:29] *********************************************
[05/27/16-07:16:29] Network Inspection System service starting.
[05/27/16-07:16:29] Version: 4.8.10240.16384
[05/27/16-07:16:29] *********************************************
[05/27/16-07:16:29] Service started by NisIpsPlugin
[05/27/16-07:16:29] Service started
[05/27/16-07:16:29] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-07:16:29] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-07:16:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-07:16:30] --Signature list start--
[05/27/16-07:16:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:16:30] --Signature list end--
[05/27/16-07:16:30] Signatures: Total: 144;  Enabled: 142
[05/27/16-07:16:30] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-07:16:30] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-07:16:30] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-07:16:30] At least one signature is active
[05/27/16-07:16:30] Connecting to the driver
[05/27/16-07:16:30] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-07:16:30] Load Definitions completed successfully.
[05/27/16-07:59:32] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-07:59:33] --Signature list start--
[05/27/16-07:59:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-07:59:33] --Signature list end--
[05/27/16-07:59:33] Signatures: Total: 144;  Enabled: 142
[05/27/16-07:59:33] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-07:59:33] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-08:01:24] *********************************************
[05/27/16-08:01:24] Network Inspection System service starting.
[05/27/16-08:01:24] Version: 4.8.10240.16384
[05/27/16-08:01:24] *********************************************
[05/27/16-08:01:24] Service started by NisIpsPlugin
[05/27/16-08:01:24] Service started
[05/27/16-08:01:24] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-08:01:24] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-08:01:24] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-08:01:24] --Signature list start--
[05/27/16-08:01:24] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:01:24] --Signature list end--
[05/27/16-08:01:24] Signatures: Total: 144;  Enabled: 142
[05/27/16-08:01:24] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-08:01:24] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-08:01:24] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-08:01:24] At least one signature is active
[05/27/16-08:01:24] Connecting to the driver
[05/27/16-08:01:24] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-08:01:24] Load Definitions completed successfully.
[05/27/16-08:44:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-08:44:33] --Signature list start--
[05/27/16-08:44:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:44:33] --Signature list end--
[05/27/16-08:44:33] Signatures: Total: 144;  Enabled: 142
[05/27/16-08:44:33] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-08:44:33] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-08:46:28] *********************************************
[05/27/16-08:46:28] Network Inspection System service starting.
[05/27/16-08:46:28] Version: 4.8.10240.16384
[05/27/16-08:46:28] *********************************************
[05/27/16-08:46:28] Service started by NisIpsPlugin
[05/27/16-08:46:28] Service started
[05/27/16-08:46:28] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-08:46:28] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-08:46:28] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-08:46:28] --Signature list start--
[05/27/16-08:46:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-08:46:28] --Signature list end--
[05/27/16-08:46:28] Signatures: Total: 144;  Enabled: 142
[05/27/16-08:46:28] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-08:46:28] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-08:46:28] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-08:46:28] At least one signature is active
[05/27/16-08:46:28] Connecting to the driver
[05/27/16-08:46:28] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-08:46:28] Load Definitions completed successfully.
[05/27/16-11:04:46] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-11:04:47] --Signature list start--
[05/27/16-11:04:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:04:47] --Signature list end--
[05/27/16-11:04:47] Signatures: Total: 144;  Enabled: 142
[05/27/16-11:04:47] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-11:04:47] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-11:20:15] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-11:20:15] --Signature list start--
[05/27/16-11:20:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:20:15] --Signature list end--
[05/27/16-11:20:15] Signatures: Total: 144;  Enabled: 142
[05/27/16-11:20:15] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-11:20:15] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-11:25:22] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-11:25:22] --Signature list start--
[05/27/16-11:25:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:25:22] --Signature list end--
[05/27/16-11:25:22] Signatures: Total: 144;  Enabled: 142
[05/27/16-11:25:22] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-11:25:22] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-11:30:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-11:30:31] --Signature list start--
[05/27/16-11:30:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:30:31] --Signature list end--
[05/27/16-11:30:31] Signatures: Total: 144;  Enabled: 142
[05/27/16-11:30:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-11:30:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-11:45:24] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-11:45:24] --Signature list start--
[05/27/16-11:45:24] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-11:45:24] --Signature list end--
[05/27/16-11:45:24] Signatures: Total: 144;  Enabled: 142
[05/27/16-11:45:24] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-11:45:24] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-12:05:15] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-12:05:15] --Signature list start--
[05/27/16-12:05:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:05:15] --Signature list end--
[05/27/16-12:05:15] Signatures: Total: 144;  Enabled: 142
[05/27/16-12:05:15] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-12:05:15] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-12:20:23] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-12:20:23] --Signature list start--
[05/27/16-12:20:23] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:20:23] --Signature list end--
[05/27/16-12:20:23] Signatures: Total: 144;  Enabled: 142
[05/27/16-12:20:23] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-12:20:23] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-12:25:36] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-12:25:36] --Signature list start--
[05/27/16-12:25:36] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:25:36] --Signature list end--
[05/27/16-12:25:36] Signatures: Total: 144;  Enabled: 142
[05/27/16-12:25:36] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-12:25:36] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-12:35:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-12:35:25] --Signature list start--
[05/27/16-12:35:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:35:25] --Signature list end--
[05/27/16-12:35:25] Signatures: Total: 144;  Enabled: 142
[05/27/16-12:35:25] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-12:35:25] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-12:59:33] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-12:59:33] --Signature list start--
[05/27/16-12:59:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-12:59:33] --Signature list end--
[05/27/16-12:59:33] Signatures: Total: 144;  Enabled: 142
[05/27/16-12:59:33] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-12:59:33] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-13:03:35] *********************************************
[05/27/16-13:03:35] Network Inspection System service starting.
[05/27/16-13:03:35] Version: 4.8.10240.16384
[05/27/16-13:03:35] *********************************************
[05/27/16-13:03:35] Service started by NisIpsPlugin
[05/27/16-13:03:35] Service started
[05/27/16-13:04:11] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-13:04:11] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-13:04:12] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-13:04:13] --Signature list start--
[05/27/16-13:04:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:04:13] --Signature list end--
[05/27/16-13:04:13] Signatures: Total: 144;  Enabled: 142
[05/27/16-13:04:13] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-13:04:13] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-13:04:13] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-13:04:13] At least one signature is active
[05/27/16-13:04:13] Connecting to the driver
[05/27/16-13:04:13] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-13:04:13] Load Definitions completed successfully.
[05/27/16-13:16:19] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-13:16:19] --Signature list start--
[05/27/16-13:16:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:16:19] --Signature list end--
[05/27/16-13:16:19] Signatures: Total: 144;  Enabled: 142
[05/27/16-13:16:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-13:16:19] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-13:46:31] *********************************************
[05/27/16-13:46:31] Network Inspection System service starting.
[05/27/16-13:46:31] Version: 4.8.10240.16384
[05/27/16-13:46:31] *********************************************
[05/27/16-13:46:31] Service started by NisIpsPlugin
[05/27/16-13:46:31] Service started
[05/27/16-13:46:31] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-13:46:31] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-13:46:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-13:46:31] --Signature list start--
[05/27/16-13:46:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-13:46:31] --Signature list end--
[05/27/16-13:46:31] Signatures: Total: 144;  Enabled: 142
[05/27/16-13:46:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-13:46:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-13:46:31] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-13:46:31] At least one signature is active
[05/27/16-13:46:31] Connecting to the driver
[05/27/16-13:46:31] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-13:46:31] Load Definitions completed successfully.
[05/27/16-14:31:24] *********************************************
[05/27/16-14:31:24] Network Inspection System service starting.
[05/27/16-14:31:24] Version: 4.8.10240.16384
[05/27/16-14:31:24] *********************************************
[05/27/16-14:31:24] Service started by NisIpsPlugin
[05/27/16-14:31:24] Service started
[05/27/16-14:31:24] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-14:31:24] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-14:31:24] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-14:31:25] --Signature list start--
[05/27/16-14:31:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:31:25] --Signature list end--
[05/27/16-14:31:25] Signatures: Total: 144;  Enabled: 142
[05/27/16-14:31:25] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-14:31:25] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-14:31:25] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-14:31:25] At least one signature is active
[05/27/16-14:31:25] Connecting to the driver
[05/27/16-14:31:25] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-14:31:25] Load Definitions completed successfully.
[05/27/16-14:45:53] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-14:45:54] --Signature list start--
[05/27/16-14:45:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-14:45:54] --Signature list end--
[05/27/16-14:45:54] Signatures: Total: 144;  Enabled: 142
[05/27/16-14:45:54] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-14:45:54] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-15:14:32] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-15:14:32] --Signature list start--
[05/27/16-15:14:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:14:32] --Signature list end--
[05/27/16-15:14:32] Signatures: Total: 144;  Enabled: 142
[05/27/16-15:14:32] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-15:14:32] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-15:16:23] *********************************************
[05/27/16-15:16:23] Network Inspection System service starting.
[05/27/16-15:16:23] Version: 4.8.10240.16384
[05/27/16-15:16:23] *********************************************
[05/27/16-15:16:23] Service started by NisIpsPlugin
[05/27/16-15:16:23] Service started
[05/27/16-15:16:23] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-15:16:23] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-15:16:23] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-15:16:23] --Signature list start--
[05/27/16-15:16:23] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:16:23] --Signature list end--
[05/27/16-15:16:23] Signatures: Total: 144;  Enabled: 142
[05/27/16-15:16:23] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-15:16:23] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-15:16:23] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-15:16:23] At least one signature is active
[05/27/16-15:16:23] Connecting to the driver
[05/27/16-15:16:23] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-15:16:23] Load Definitions completed successfully.
[05/27/16-15:44:04] *********************************************
[05/27/16-15:44:04] Network Inspection System service starting.
[05/27/16-15:44:04] Version: 4.8.10240.16384
[05/27/16-15:44:04] *********************************************
[05/27/16-15:44:04] Service started by NisIpsPlugin
[05/27/16-15:44:04] Service started
[05/27/16-15:44:04] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-15:44:04] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-15:44:04] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-15:44:04] --Signature list start--
[05/27/16-15:44:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-15:44:04] --Signature list end--
[05/27/16-15:44:04] Signatures: Total: 144;  Enabled: 142
[05/27/16-15:44:04] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-15:44:04] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-15:44:04] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-15:44:04] At least one signature is active
[05/27/16-15:44:04] Connecting to the driver
[05/27/16-15:44:04] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-15:44:04] Load Definitions completed successfully.
[05/27/16-16:26:15] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-16:26:16] --Signature list start--
[05/27/16-16:26:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:26:16] --Signature list end--
[05/27/16-16:26:16] Signatures: Total: 144;  Enabled: 142
[05/27/16-16:26:16] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-16:26:16] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-16:28:29] *********************************************
[05/27/16-16:28:29] Network Inspection System service starting.
[05/27/16-16:28:29] Version: 4.8.10240.16384
[05/27/16-16:28:29] *********************************************
[05/27/16-16:28:29] Service started by NisIpsPlugin
[05/27/16-16:28:29] Service started
[05/27/16-16:28:29] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-16:28:29] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-16:28:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-16:28:30] --Signature list start--
[05/27/16-16:28:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:28:30] --Signature list end--
[05/27/16-16:28:30] Signatures: Total: 144;  Enabled: 142
[05/27/16-16:28:30] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-16:28:30] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-16:28:30] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-16:28:30] At least one signature is active
[05/27/16-16:28:30] Connecting to the driver
[05/27/16-16:28:30] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-16:28:30] Load Definitions completed successfully.
[05/27/16-16:44:36] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-16:44:37] --Signature list start--
[05/27/16-16:44:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:44:37] --Signature list end--
[05/27/16-16:44:37] Signatures: Total: 144;  Enabled: 142
[05/27/16-16:44:37] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-16:44:37] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-16:49:42] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-16:49:43] --Signature list start--
[05/27/16-16:49:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:49:43] --Signature list end--
[05/27/16-16:49:43] Signatures: Total: 144;  Enabled: 142
[05/27/16-16:49:43] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-16:49:43] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-16:56:13] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-16:56:13] --Signature list start--
[05/27/16-16:56:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-16:56:13] --Signature list end--
[05/27/16-16:56:13] Signatures: Total: 144;  Enabled: 142
[05/27/16-16:56:13] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-16:56:13] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-17:09:40] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-17:09:41] --Signature list start--
[05/27/16-17:09:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:09:41] --Signature list end--
[05/27/16-17:09:41] Signatures: Total: 144;  Enabled: 142
[05/27/16-17:09:41] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-17:09:41] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-17:16:27] *********************************************
[05/27/16-17:16:27] Network Inspection System service starting.
[05/27/16-17:16:27] Version: 4.8.10240.16384
[05/27/16-17:16:27] *********************************************
[05/27/16-17:16:27] Service started by NisIpsPlugin
[05/27/16-17:16:27] Service started
[05/27/16-17:16:28] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-17:16:28] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-17:16:28] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-17:16:28] --Signature list start--
[05/27/16-17:16:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:16:28] --Signature list end--
[05/27/16-17:16:28] Signatures: Total: 144;  Enabled: 142
[05/27/16-17:16:28] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-17:16:28] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-17:16:28] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-17:16:28] At least one signature is active
[05/27/16-17:16:28] Connecting to the driver
[05/27/16-17:16:28] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-17:16:28] Load Definitions completed successfully.
[05/27/16-17:45:57] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-17:45:57] --Signature list start--
[05/27/16-17:45:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-17:45:57] --Signature list end--
[05/27/16-17:45:57] Signatures: Total: 144;  Enabled: 142
[05/27/16-17:45:57] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-17:45:57] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-21:16:47] *********************************************
[05/27/16-21:16:47] Network Inspection System service starting.
[05/27/16-21:16:47] Version: 4.8.10240.16384
[05/27/16-21:16:47] *********************************************
[05/27/16-21:16:47] Service started by NisIpsPlugin
[05/27/16-21:16:47] Service started
[05/27/16-21:16:48] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-21:16:48] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-21:16:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-21:16:48] --Signature list start--
[05/27/16-21:16:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:16:48] --Signature list end--
[05/27/16-21:16:48] Signatures: Total: 144;  Enabled: 142
[05/27/16-21:16:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-21:16:48] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-21:16:48] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-21:16:48] At least one signature is active
[05/27/16-21:16:48] Connecting to the driver
[05/27/16-21:16:48] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-21:16:48] Load Definitions completed successfully.
[05/27/16-21:44:28] *********************************************
[05/27/16-21:44:28] Network Inspection System service starting.
[05/27/16-21:44:28] Version: 4.8.10240.16384
[05/27/16-21:44:28] *********************************************
[05/27/16-21:44:28] Service started by NisIpsPlugin
[05/27/16-21:44:28] Service started
[05/27/16-21:44:28] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-21:44:28] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-21:44:28] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-21:44:29] --Signature list start--
[05/27/16-21:44:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-21:44:29] --Signature list end--
[05/27/16-21:44:29] Signatures: Total: 144;  Enabled: 142
[05/27/16-21:44:29] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-21:44:29] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-21:44:29] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-21:44:29] At least one signature is active
[05/27/16-21:44:29] Connecting to the driver
[05/27/16-21:44:29] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-21:44:29] Load Definitions completed successfully.
[05/27/16-22:13:06] *********************************************
[05/27/16-22:13:06] Network Inspection System service starting.
[05/27/16-22:13:06] Version: 4.8.10240.16384
[05/27/16-22:13:06] *********************************************
[05/27/16-22:13:06] Service started by NisIpsPlugin
[05/27/16-22:13:06] Service started
[05/27/16-22:13:06] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-22:13:06] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-22:13:06] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-22:13:06] --Signature list start--
[05/27/16-22:13:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:13:06] --Signature list end--
[05/27/16-22:13:06] Signatures: Total: 144;  Enabled: 142
[05/27/16-22:13:06] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-22:13:06] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-22:13:06] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-22:13:06] At least one signature is active
[05/27/16-22:13:06] Connecting to the driver
[05/27/16-22:13:06] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-22:13:06] Load Definitions completed successfully.
[05/27/16-22:39:46] *********************************************
[05/27/16-22:39:46] Network Inspection System service starting.
[05/27/16-22:39:46] Version: 4.8.10240.16384
[05/27/16-22:39:46] *********************************************
[05/27/16-22:39:46] Service started by NisIpsPlugin
[05/27/16-22:39:46] Service started
[05/27/16-22:39:47] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-22:39:47] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-22:39:47] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-22:39:47] --Signature list start--
[05/27/16-22:39:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-22:39:47] --Signature list end--
[05/27/16-22:39:47] Signatures: Total: 144;  Enabled: 142
[05/27/16-22:39:47] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-22:39:47] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-22:39:47] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-22:39:47] At least one signature is active
[05/27/16-22:39:47] Connecting to the driver
[05/27/16-22:39:47] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-22:39:47] Load Definitions completed successfully.
[05/27/16-23:04:29] *********************************************
[05/27/16-23:04:29] Network Inspection System service starting.
[05/27/16-23:04:29] Version: 4.8.10240.16384
[05/27/16-23:04:29] *********************************************
[05/27/16-23:04:29] Service started by NisIpsPlugin
[05/27/16-23:04:29] Service started
[05/27/16-23:04:29] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/27/16-23:04:29] Win8+: overriding fZeroDayEnabled to FALSE
[05/27/16-23:04:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-23:04:30] --Signature list start--
[05/27/16-23:04:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:04:30] --Signature list end--
[05/27/16-23:04:30] Signatures: Total: 144;  Enabled: 142
[05/27/16-23:04:30] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-23:04:30] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/27/16-23:04:30] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/27/16-23:04:30] At least one signature is active
[05/27/16-23:04:30] Connecting to the driver
[05/27/16-23:04:30] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/27/16-23:04:30] Load Definitions completed successfully.
[05/27/16-23:16:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/27/16-23:16:00] --Signature list start--
[05/27/16-23:16:00] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/27/16-23:16:00] --Signature list end--
[05/27/16-23:16:00] Signatures: Total: 144;  Enabled: 142
[05/27/16-23:16:00] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/27/16-23:16:00] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-00:29:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-00:29:32] --Signature list start--
[05/28/16-00:29:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:29:32] --Signature list end--
[05/28/16-00:29:32] Signatures: Total: 144;  Enabled: 142
[05/28/16-00:29:32] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-00:29:32] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-00:46:25] *********************************************
[05/28/16-00:46:25] Network Inspection System service starting.
[05/28/16-00:46:25] Version: 4.8.10240.16384
[05/28/16-00:46:25] *********************************************
[05/28/16-00:46:25] Service started by NisIpsPlugin
[05/28/16-00:46:25] Service started
[05/28/16-00:46:25] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-00:46:25] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-00:46:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-00:46:26] --Signature list start--
[05/28/16-00:46:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-00:46:26] --Signature list end--
[05/28/16-00:46:26] Signatures: Total: 144;  Enabled: 142
[05/28/16-00:46:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-00:46:26] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-00:46:26] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-00:46:26] At least one signature is active
[05/28/16-00:46:26] Connecting to the driver
[05/28/16-00:46:26] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-00:46:26] Load Definitions completed successfully.
[05/28/16-01:59:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-01:59:32] --Signature list start--
[05/28/16-01:59:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-01:59:32] --Signature list end--
[05/28/16-01:59:32] Signatures: Total: 144;  Enabled: 142
[05/28/16-01:59:32] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-01:59:32] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-02:16:25] *********************************************
[05/28/16-02:16:25] Network Inspection System service starting.
[05/28/16-02:16:25] Version: 4.8.10240.16384
[05/28/16-02:16:25] *********************************************
[05/28/16-02:16:25] Service started by NisIpsPlugin
[05/28/16-02:16:25] Service started
[05/28/16-02:16:26] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-02:16:26] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-02:16:26] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-02:16:26] --Signature list start--
[05/28/16-02:16:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:16:26] --Signature list end--
[05/28/16-02:16:26] Signatures: Total: 144;  Enabled: 142
[05/28/16-02:16:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-02:16:26] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-02:16:26] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-02:16:26] At least one signature is active
[05/28/16-02:16:26] Connecting to the driver
[05/28/16-02:16:26] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-02:16:26] Load Definitions completed successfully.
[05/28/16-02:59:30] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-02:59:32] --Signature list start--
[05/28/16-02:59:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-02:59:32] --Signature list end--
[05/28/16-02:59:32] Signatures: Total: 144;  Enabled: 142
[05/28/16-02:59:32] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-02:59:32] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-03:16:23] *********************************************
[05/28/16-03:16:23] Network Inspection System service starting.
[05/28/16-03:16:23] Version: 4.8.10240.16384
[05/28/16-03:16:23] *********************************************
[05/28/16-03:16:23] Service started by NisIpsPlugin
[05/28/16-03:16:23] Service started
[05/28/16-03:16:23] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-03:16:23] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-03:16:23] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-03:16:23] --Signature list start--
[05/28/16-03:16:23] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:16:23] --Signature list end--
[05/28/16-03:16:23] Signatures: Total: 144;  Enabled: 142
[05/28/16-03:16:23] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-03:16:23] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-03:16:23] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-03:16:23] At least one signature is active
[05/28/16-03:16:23] Connecting to the driver
[05/28/16-03:16:23] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-03:16:23] Load Definitions completed successfully.
[05/28/16-03:45:02] *********************************************
[05/28/16-03:45:02] Network Inspection System service starting.
[05/28/16-03:45:02] Version: 4.8.10240.16384
[05/28/16-03:45:02] *********************************************
[05/28/16-03:45:02] Service started by NisIpsPlugin
[05/28/16-03:45:02] Service started
[05/28/16-03:45:02] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-03:45:02] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-03:45:02] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-03:45:03] --Signature list start--
[05/28/16-03:45:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-03:45:03] --Signature list end--
[05/28/16-03:45:03] Signatures: Total: 144;  Enabled: 142
[05/28/16-03:45:03] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-03:45:03] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-03:45:03] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-03:45:03] At least one signature is active
[05/28/16-03:45:03] Connecting to the driver
[05/28/16-03:45:03] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-03:45:03] Load Definitions completed successfully.
[05/28/16-04:09:40] *********************************************
[05/28/16-04:09:40] Network Inspection System service starting.
[05/28/16-04:09:40] Version: 4.8.10240.16384
[05/28/16-04:09:40] *********************************************
[05/28/16-04:09:40] Service started by NisIpsPlugin
[05/28/16-04:09:40] Service started
[05/28/16-04:09:41] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-04:09:41] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-04:09:41] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-04:09:41] --Signature list start--
[05/28/16-04:09:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:09:41] --Signature list end--
[05/28/16-04:09:41] Signatures: Total: 144;  Enabled: 142
[05/28/16-04:09:41] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-04:09:41] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-04:09:41] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-04:09:41] At least one signature is active
[05/28/16-04:09:41] Connecting to the driver
[05/28/16-04:09:41] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-04:09:41] Load Definitions completed successfully.
[05/28/16-04:34:26] *********************************************
[05/28/16-04:34:26] Network Inspection System service starting.
[05/28/16-04:34:26] Version: 4.8.10240.16384
[05/28/16-04:34:26] *********************************************
[05/28/16-04:34:26] Service started by NisIpsPlugin
[05/28/16-04:34:26] Service started
[05/28/16-04:34:26] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-04:34:26] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-04:34:26] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-04:34:26] --Signature list start--
[05/28/16-04:34:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-04:34:26] --Signature list end--
[05/28/16-04:34:26] Signatures: Total: 144;  Enabled: 142
[05/28/16-04:34:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-04:34:26] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-04:34:26] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-04:34:26] At least one signature is active
[05/28/16-04:34:26] Connecting to the driver
[05/28/16-04:34:26] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-04:34:26] Load Definitions completed successfully.
[05/28/16-05:01:10] *********************************************
[05/28/16-05:01:10] Network Inspection System service starting.
[05/28/16-05:01:10] Version: 4.8.10240.16384
[05/28/16-05:01:10] *********************************************
[05/28/16-05:01:10] Service started by NisIpsPlugin
[05/28/16-05:01:10] Service started
[05/28/16-05:01:10] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-05:01:10] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-05:01:10] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-05:01:10] --Signature list start--
[05/28/16-05:01:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:01:10] --Signature list end--
[05/28/16-05:01:10] Signatures: Total: 144;  Enabled: 142
[05/28/16-05:01:10] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-05:01:10] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-05:01:10] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-05:01:10] At least one signature is active
[05/28/16-05:01:10] Connecting to the driver
[05/28/16-05:01:10] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-05:01:10] Load Definitions completed successfully.
[05/28/16-05:25:50] *********************************************
[05/28/16-05:25:50] Network Inspection System service starting.
[05/28/16-05:25:50] Version: 4.8.10240.16384
[05/28/16-05:25:50] *********************************************
[05/28/16-05:25:50] Service started by NisIpsPlugin
[05/28/16-05:25:50] Service started
[05/28/16-05:25:50] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-05:25:50] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-05:25:50] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-05:25:50] --Signature list start--
[05/28/16-05:25:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:25:50] --Signature list end--
[05/28/16-05:25:50] Signatures: Total: 144;  Enabled: 142
[05/28/16-05:25:50] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-05:25:50] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-05:25:50] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-05:25:50] At least one signature is active
[05/28/16-05:25:50] Connecting to the driver
[05/28/16-05:25:50] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-05:25:50] Load Definitions completed successfully.
[05/28/16-05:56:29] *********************************************
[05/28/16-05:56:29] Network Inspection System service starting.
[05/28/16-05:56:29] Version: 4.8.10240.16384
[05/28/16-05:56:29] *********************************************
[05/28/16-05:56:29] Service started by NisIpsPlugin
[05/28/16-05:56:29] Service started
[05/28/16-05:56:29] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-05:56:29] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-05:56:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-05:56:29] --Signature list start--
[05/28/16-05:56:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-05:56:29] --Signature list end--
[05/28/16-05:56:29] Signatures: Total: 144;  Enabled: 142
[05/28/16-05:56:29] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-05:56:29] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-05:56:29] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-05:56:29] At least one signature is active
[05/28/16-05:56:29] Connecting to the driver
[05/28/16-05:56:29] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-05:56:29] Load Definitions completed successfully.
[05/28/16-06:16:03] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-06:16:03] --Signature list start--
[05/28/16-06:16:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:16:03] --Signature list end--
[05/28/16-06:16:03] Signatures: Total: 144;  Enabled: 142
[05/28/16-06:16:03] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-06:16:03] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-06:21:08] *********************************************
[05/28/16-06:21:08] Network Inspection System service starting.
[05/28/16-06:21:08] Version: 4.8.10240.16384
[05/28/16-06:21:08] *********************************************
[05/28/16-06:21:08] Service started by NisIpsPlugin
[05/28/16-06:21:08] Service started
[05/28/16-06:21:08] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-06:21:08] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-06:21:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-06:21:09] --Signature list start--
[05/28/16-06:21:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:21:09] --Signature list end--
[05/28/16-06:21:09] Signatures: Total: 144;  Enabled: 142
[05/28/16-06:21:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-06:21:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-06:21:09] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-06:21:09] At least one signature is active
[05/28/16-06:21:09] Connecting to the driver
[05/28/16-06:21:09] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-06:21:09] Load Definitions completed successfully.
[05/28/16-06:46:04] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-06:46:04] --Signature list start--
[05/28/16-06:46:04] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:46:04] --Signature list end--
[05/28/16-06:46:04] Signatures: Total: 144;  Enabled: 142
[05/28/16-06:46:04] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-06:46:04] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-06:47:48] *********************************************
[05/28/16-06:47:48] Network Inspection System service starting.
[05/28/16-06:47:48] Version: 4.8.10240.16384
[05/28/16-06:47:48] *********************************************
[05/28/16-06:47:48] Service started by NisIpsPlugin
[05/28/16-06:47:48] Service started
[05/28/16-06:47:48] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-06:47:48] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-06:47:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-06:47:49] --Signature list start--
[05/28/16-06:47:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:47:49] --Signature list end--
[05/28/16-06:47:49] Signatures: Total: 144;  Enabled: 142
[05/28/16-06:47:49] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-06:47:49] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-06:47:49] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-06:47:49] At least one signature is active
[05/28/16-06:47:49] Connecting to the driver
[05/28/16-06:47:49] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-06:47:49] Load Definitions completed successfully.
[05/28/16-06:57:54] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-06:57:54] --Signature list start--
[05/28/16-06:57:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-06:57:54] --Signature list end--
[05/28/16-06:57:54] Signatures: Total: 144;  Enabled: 142
[05/28/16-06:57:54] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-06:57:54] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-07:16:28] *********************************************
[05/28/16-07:16:28] Network Inspection System service starting.
[05/28/16-07:16:28] Version: 4.8.10240.16384
[05/28/16-07:16:28] *********************************************
[05/28/16-07:16:28] Service started by NisIpsPlugin
[05/28/16-07:16:28] Service started
[05/28/16-07:16:28] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-07:16:28] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-07:16:28] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-07:16:28] --Signature list start--
[05/28/16-07:16:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:16:28] --Signature list end--
[05/28/16-07:16:28] Signatures: Total: 144;  Enabled: 142
[05/28/16-07:16:28] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-07:16:28] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-07:16:28] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-07:16:28] At least one signature is active
[05/28/16-07:16:28] Connecting to the driver
[05/28/16-07:16:28] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-07:16:28] Load Definitions completed successfully.
[05/28/16-07:44:07] *********************************************
[05/28/16-07:44:07] Network Inspection System service starting.
[05/28/16-07:44:07] Version: 4.8.10240.16384
[05/28/16-07:44:07] *********************************************
[05/28/16-07:44:07] Service started by NisIpsPlugin
[05/28/16-07:44:07] Service started
[05/28/16-07:44:07] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-07:44:07] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-07:44:07] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-07:44:08] --Signature list start--
[05/28/16-07:44:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-07:44:08] --Signature list end--
[05/28/16-07:44:08] Signatures: Total: 144;  Enabled: 142
[05/28/16-07:44:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-07:44:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-07:44:08] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-07:44:08] At least one signature is active
[05/28/16-07:44:08] Connecting to the driver
[05/28/16-07:44:08] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-07:44:08] Load Definitions completed successfully.
[05/28/16-08:08:47] *********************************************
[05/28/16-08:08:47] Network Inspection System service starting.
[05/28/16-08:08:47] Version: 4.8.10240.16384
[05/28/16-08:08:47] *********************************************
[05/28/16-08:08:47] Service started by NisIpsPlugin
[05/28/16-08:08:47] Service started
[05/28/16-08:08:48] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-08:08:48] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-08:08:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-08:08:48] --Signature list start--
[05/28/16-08:08:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:08:48] --Signature list end--
[05/28/16-08:08:48] Signatures: Total: 144;  Enabled: 142
[05/28/16-08:08:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-08:08:48] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-08:08:48] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-08:08:48] At least one signature is active
[05/28/16-08:08:48] Connecting to the driver
[05/28/16-08:08:48] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-08:08:48] Load Definitions completed successfully.
[05/28/16-08:33:25] *********************************************
[05/28/16-08:33:25] Network Inspection System service starting.
[05/28/16-08:33:25] Version: 4.8.10240.16384
[05/28/16-08:33:25] *********************************************
[05/28/16-08:33:25] Service started by NisIpsPlugin
[05/28/16-08:33:25] Service started
[05/28/16-08:33:25] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-08:33:25] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-08:33:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-08:33:25] --Signature list start--
[05/28/16-08:33:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:33:25] --Signature list end--
[05/28/16-08:33:25] Signatures: Total: 144;  Enabled: 142
[05/28/16-08:33:25] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-08:33:25] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-08:33:25] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-08:33:25] At least one signature is active
[05/28/16-08:33:25] Connecting to the driver
[05/28/16-08:33:25] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-08:33:25] Load Definitions completed successfully.
[05/28/16-08:46:05] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-08:46:05] --Signature list start--
[05/28/16-08:46:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:46:05] --Signature list end--
[05/28/16-08:46:05] Signatures: Total: 144;  Enabled: 142
[05/28/16-08:46:05] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-08:46:05] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-08:58:05] *********************************************
[05/28/16-08:58:05] Network Inspection System service starting.
[05/28/16-08:58:05] Version: 4.8.10240.16384
[05/28/16-08:58:05] *********************************************
[05/28/16-08:58:05] Service started by NisIpsPlugin
[05/28/16-08:58:05] Service started
[05/28/16-08:58:05] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-08:58:05] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-08:58:05] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-08:58:05] --Signature list start--
[05/28/16-08:58:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-08:58:05] --Signature list end--
[05/28/16-08:58:05] Signatures: Total: 144;  Enabled: 142
[05/28/16-08:58:05] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-08:58:05] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-08:58:05] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-08:58:05] At least one signature is active
[05/28/16-08:58:05] Connecting to the driver
[05/28/16-08:58:05] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-08:58:05] Load Definitions completed successfully.
[05/28/16-09:16:06] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-09:16:06] --Signature list start--
[05/28/16-09:16:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:16:06] --Signature list end--
[05/28/16-09:16:06] Signatures: Total: 144;  Enabled: 142
[05/28/16-09:16:06] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-09:16:06] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-09:22:52] *********************************************
[05/28/16-09:22:52] Network Inspection System service starting.
[05/28/16-09:22:52] Version: 4.8.10240.16384
[05/28/16-09:22:52] *********************************************
[05/28/16-09:22:52] Service started by NisIpsPlugin
[05/28/16-09:22:52] Service started
[05/28/16-09:22:52] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-09:22:52] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-09:22:52] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-09:22:52] --Signature list start--
[05/28/16-09:22:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:22:52] --Signature list end--
[05/28/16-09:22:52] Signatures: Total: 144;  Enabled: 142
[05/28/16-09:22:52] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-09:22:52] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-09:22:52] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-09:22:52] At least one signature is active
[05/28/16-09:22:52] Connecting to the driver
[05/28/16-09:22:52] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-09:22:52] Load Definitions completed successfully.
[05/28/16-09:25:36] Parse error - Cancel Inspection
[05/28/16-09:25:36] Parse error - Cancel Inspection
[05/28/16-09:33:58] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-09:33:58] --Signature list start--
[05/28/16-09:33:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:33:58] --Signature list end--
[05/28/16-09:33:58] Signatures: Total: 144;  Enabled: 142
[05/28/16-09:33:58] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-09:33:58] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-09:44:50] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-09:44:51] --Signature list start--
[05/28/16-09:44:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:44:51] --Signature list end--
[05/28/16-09:44:51] Signatures: Total: 144;  Enabled: 142
[05/28/16-09:44:51] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-09:44:51] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-09:54:47] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-09:54:48] --Signature list start--
[05/28/16-09:54:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-09:54:48] --Signature list end--
[05/28/16-09:54:48] Signatures: Total: 144;  Enabled: 142
[05/28/16-09:54:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-09:54:48] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-10:05:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-10:05:01] --Signature list start--
[05/28/16-10:05:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:05:01] --Signature list end--
[05/28/16-10:05:01] Signatures: Total: 144;  Enabled: 142
[05/28/16-10:05:01] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-10:05:01] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-10:25:05] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-10:25:05] --Signature list start--
[05/28/16-10:25:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:25:05] --Signature list end--
[05/28/16-10:25:05] Signatures: Total: 144;  Enabled: 142
[05/28/16-10:25:05] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-10:25:05] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-10:33:57] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-10:33:57] --Signature list start--
[05/28/16-10:33:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-10:33:57] --Signature list end--
[05/28/16-10:33:57] Signatures: Total: 144;  Enabled: 142
[05/28/16-10:33:57] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-10:33:57] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-10:47:02] Parse error - Cancel Inspection
[05/28/16-10:47:21] Parse error - Cancel Inspection
[05/28/16-10:56:19] Parse error - Cancel Inspection
[05/28/16-11:00:59] Parse error - Cancel Inspection
[05/28/16-11:06:57] Parse error - Cancel Inspection
[05/28/16-11:21:02] Parse error - Cancel Inspection
[05/28/16-11:52:28] Parse error - Cancel Inspection
[05/28/16-12:21:43] *********************************************
[05/28/16-12:21:43] Network Inspection System service starting.
[05/28/16-12:21:43] Version: 4.8.10240.16384
[05/28/16-12:21:43] *********************************************
[05/28/16-12:21:43] Service started by NisIpsPlugin
[05/28/16-12:21:43] Service started
[05/28/16-12:21:44] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-12:21:44] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-12:21:44] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-12:21:44] --Signature list start--
[05/28/16-12:21:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:21:44] --Signature list end--
[05/28/16-12:21:44] Signatures: Total: 144;  Enabled: 142
[05/28/16-12:21:44] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-12:21:44] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-12:21:44] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-12:21:44] At least one signature is active
[05/28/16-12:21:44] Connecting to the driver
[05/28/16-12:21:44] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-12:21:44] Load Definitions completed successfully.
[05/28/16-12:33:40] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-12:33:41] --Signature list start--
[05/28/16-12:33:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-12:33:41] --Signature list end--
[05/28/16-12:33:41] Signatures: Total: 144;  Enabled: 142
[05/28/16-12:33:41] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-12:33:41] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-12:34:02] Parse error - Cancel Inspection
[05/28/16-12:34:02] Parse error - Cancel Inspection
[05/28/16-20:14:35] Parse error - Cancel Inspection
[05/28/16-20:14:35] Parse error - Cancel Inspection
[05/28/16-21:53:51] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-21:53:51] --Signature list start--
[05/28/16-21:53:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-21:53:51] --Signature list end--
[05/28/16-21:53:51] Signatures: Total: 144;  Enabled: 142
[05/28/16-21:53:51] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-21:53:51] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-22:01:33] *********************************************
[05/28/16-22:01:33] Network Inspection System service starting.
[05/28/16-22:01:33] Version: 4.8.10240.16384
[05/28/16-22:01:33] *********************************************
[05/28/16-22:01:33] Service started by NisIpsPlugin
[05/28/16-22:01:33] Service started
[05/28/16-22:01:33] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-22:01:33] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-22:01:33] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-22:01:34] --Signature list start--
[05/28/16-22:01:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:01:34] --Signature list end--
[05/28/16-22:01:34] Signatures: Total: 144;  Enabled: 142
[05/28/16-22:01:34] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-22:01:34] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-22:01:34] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-22:01:34] At least one signature is active
[05/28/16-22:01:34] Connecting to the driver
[05/28/16-22:01:34] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-22:01:34] Load Definitions completed successfully.
[05/28/16-22:15:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-22:15:30] --Signature list start--
[05/28/16-22:15:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:15:30] --Signature list end--
[05/28/16-22:15:30] Signatures: Total: 144;  Enabled: 142
[05/28/16-22:15:30] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-22:15:30] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-22:15:37] Parse error - Cancel Inspection
[05/28/16-22:15:37] Parse error - Cancel Inspection
[05/28/16-22:31:13] *********************************************
[05/28/16-22:31:13] Network Inspection System service starting.
[05/28/16-22:31:13] Version: 4.8.10240.16384
[05/28/16-22:31:13] *********************************************
[05/28/16-22:31:13] Service started by NisIpsPlugin
[05/28/16-22:31:13] Service started
[05/28/16-22:31:14] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-22:31:14] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-22:31:14] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-22:31:14] --Signature list start--
[05/28/16-22:31:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-22:31:14] --Signature list end--
[05/28/16-22:31:14] Signatures: Total: 144;  Enabled: 142
[05/28/16-22:31:14] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-22:31:14] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-22:31:14] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-22:31:14] At least one signature is active
[05/28/16-22:31:14] Connecting to the driver
[05/28/16-22:31:14] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-22:31:14] Load Definitions completed successfully.
[05/28/16-23:01:14] *********************************************
[05/28/16-23:01:14] Network Inspection System service starting.
[05/28/16-23:01:14] Version: 4.8.10240.16384
[05/28/16-23:01:14] *********************************************
[05/28/16-23:01:14] Service started by NisIpsPlugin
[05/28/16-23:01:14] Service started
[05/28/16-23:01:14] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/28/16-23:01:14] Win8+: overriding fZeroDayEnabled to FALSE
[05/28/16-23:01:14] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-23:01:15] --Signature list start--
[05/28/16-23:01:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:01:15] --Signature list end--
[05/28/16-23:01:15] Signatures: Total: 144;  Enabled: 142
[05/28/16-23:01:15] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-23:01:15] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-23:01:15] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/28/16-23:01:15] At least one signature is active
[05/28/16-23:01:15] Connecting to the driver
[05/28/16-23:01:15] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/28/16-23:01:15] Load Definitions completed successfully.
[05/28/16-23:22:39] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-23:22:39] --Signature list start--
[05/28/16-23:22:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:22:39] --Signature list end--
[05/28/16-23:22:39] Signatures: Total: 144;  Enabled: 142
[05/28/16-23:22:39] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-23:22:39] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-23:32:35] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-23:32:35] --Signature list start--
[05/28/16-23:32:35] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:32:35] --Signature list end--
[05/28/16-23:32:35] Signatures: Total: 144;  Enabled: 142
[05/28/16-23:32:35] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-23:32:35] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/28/16-23:42:49] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/28/16-23:42:49] --Signature list start--
[05/28/16-23:42:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/28/16-23:42:49] --Signature list end--
[05/28/16-23:42:49] Signatures: Total: 144;  Enabled: 142
[05/28/16-23:42:49] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/28/16-23:42:49] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-13:01:09] *********************************************
[05/29/16-13:01:09] Network Inspection System service starting.
[05/29/16-13:01:09] Version: 4.8.10240.16384
[05/29/16-13:01:09] *********************************************
[05/29/16-13:01:09] Service started by NisIpsPlugin
[05/29/16-13:01:09] Service started
[05/29/16-13:01:09] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/29/16-13:01:09] Win8+: overriding fZeroDayEnabled to FALSE
[05/29/16-13:01:09] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-13:01:10] --Signature list start--
[05/29/16-13:01:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:01:10] --Signature list end--
[05/29/16-13:01:10] Signatures: Total: 144;  Enabled: 142
[05/29/16-13:01:10] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-13:01:10] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-13:01:10] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/29/16-13:01:10] At least one signature is active
[05/29/16-13:01:10] Connecting to the driver
[05/29/16-13:01:10] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/29/16-13:01:10] Load Definitions completed successfully.
[05/29/16-13:22:47] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-13:22:47] --Signature list start--
[05/29/16-13:22:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:22:47] --Signature list end--
[05/29/16-13:22:47] Signatures: Total: 144;  Enabled: 142
[05/29/16-13:22:47] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-13:22:47] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-13:26:24] Parse error - Cancel Inspection
[05/29/16-13:26:25] Parse error - Cancel Inspection
[05/29/16-13:32:41] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-13:32:41] --Signature list start--
[05/29/16-13:32:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:32:41] --Signature list end--
[05/29/16-13:32:41] Signatures: Total: 144;  Enabled: 142
[05/29/16-13:32:41] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-13:32:41] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-13:42:49] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-13:42:49] --Signature list start--
[05/29/16-13:42:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:42:49] --Signature list end--
[05/29/16-13:42:49] Signatures: Total: 144;  Enabled: 142
[05/29/16-13:42:49] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-13:42:49] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-13:56:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-13:56:26] --Signature list start--
[05/29/16-13:56:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-13:56:26] --Signature list end--
[05/29/16-13:56:26] Signatures: Total: 144;  Enabled: 142
[05/29/16-13:56:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-13:56:26] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-13:56:26] Parse error - Cancel Inspection
[05/29/16-14:02:53] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-14:02:53] --Signature list start--
[05/29/16-14:02:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:02:53] --Signature list end--
[05/29/16-14:02:53] Signatures: Total: 144;  Enabled: 142
[05/29/16-14:02:53] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-14:02:53] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-14:17:49] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-14:17:49] --Signature list start--
[05/29/16-14:17:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:17:49] --Signature list end--
[05/29/16-14:17:49] Signatures: Total: 144;  Enabled: 142
[05/29/16-14:17:49] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-14:17:49] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-14:22:55] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-14:22:55] --Signature list start--
[05/29/16-14:22:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:22:55] --Signature list end--
[05/29/16-14:22:55] Signatures: Total: 144;  Enabled: 142
[05/29/16-14:22:55] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-14:22:55] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-14:42:57] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-14:42:57] --Signature list start--
[05/29/16-14:42:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-14:42:57] --Signature list end--
[05/29/16-14:42:57] Signatures: Total: 144;  Enabled: 142
[05/29/16-14:42:57] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-14:42:57] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:02:54] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-15:02:54] --Signature list start--
[05/29/16-15:02:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:02:54] --Signature list end--
[05/29/16-15:02:54] Signatures: Total: 144;  Enabled: 142
[05/29/16-15:02:54] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-15:02:55] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:09:40] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-15:09:40] --Signature list start--
[05/29/16-15:09:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:09:40] --Signature list end--
[05/29/16-15:09:40] Signatures: Total: 144;  Enabled: 142
[05/29/16-15:09:40] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-15:09:40] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:17:57] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-15:17:57] --Signature list start--
[05/29/16-15:17:57] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:17:57] --Signature list end--
[05/29/16-15:17:57] Signatures: Total: 144;  Enabled: 142
[05/29/16-15:17:57] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-15:17:57] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:23:02] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-15:23:02] --Signature list start--
[05/29/16-15:23:02] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:23:02] --Signature list end--
[05/29/16-15:23:02] Signatures: Total: 144;  Enabled: 142
[05/29/16-15:23:02] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-15:23:02] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:32:59] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-15:32:59] --Signature list start--
[05/29/16-15:32:59] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:32:59] --Signature list end--
[05/29/16-15:32:59] Signatures: Total: 144;  Enabled: 142
[05/29/16-15:32:59] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-15:32:59] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:43:05] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-15:43:05] --Signature list start--
[05/29/16-15:43:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:43:05] --Signature list end--
[05/29/16-15:43:05] Signatures: Total: 144;  Enabled: 142
[05/29/16-15:43:05] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-15:43:05] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:55:04] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-15:55:05] --Signature list start--
[05/29/16-15:55:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-15:55:05] --Signature list end--
[05/29/16-15:55:05] Signatures: Total: 144;  Enabled: 142
[05/29/16-15:55:05] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-15:55:05] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-15:56:26] Parse error - Cancel Inspection
[05/29/16-16:01:59] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-16:02:00] --Signature list start--
[05/29/16-16:02:00] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:02:00] --Signature list end--
[05/29/16-16:02:00] Signatures: Total: 144;  Enabled: 142
[05/29/16-16:02:00] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-16:02:00] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-16:12:16] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-16:12:16] --Signature list start--
[05/29/16-16:12:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:12:16] --Signature list end--
[05/29/16-16:12:16] Signatures: Total: 144;  Enabled: 142
[05/29/16-16:12:16] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-16:12:16] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-16:17:55] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-16:17:56] --Signature list start--
[05/29/16-16:17:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:17:56] --Signature list end--
[05/29/16-16:17:56] Signatures: Total: 144;  Enabled: 142
[05/29/16-16:17:56] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-16:17:56] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-16:23:09] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-16:23:09] --Signature list start--
[05/29/16-16:23:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:23:09] --Signature list end--
[05/29/16-16:23:09] Signatures: Total: 144;  Enabled: 142
[05/29/16-16:23:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-16:23:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-16:33:07] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-16:33:07] --Signature list start--
[05/29/16-16:33:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:33:07] --Signature list end--
[05/29/16-16:33:07] Signatures: Total: 144;  Enabled: 142
[05/29/16-16:33:07] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-16:33:07] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/29/16-16:43:11] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/29/16-16:43:11] --Signature list start--
[05/29/16-16:43:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/29/16-16:43:11] --Signature list end--
[05/29/16-16:43:11] Signatures: Total: 144;  Enabled: 142
[05/29/16-16:43:11] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/29/16-16:43:11] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-11:30:40] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-11:30:40] --Signature list start--
[05/30/16-11:30:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:30:40] --Signature list end--
[05/30/16-11:30:40] Signatures: Total: 144;  Enabled: 142
[05/30/16-11:30:40] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-11:30:40] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-11:37:47] Parse error - Cancel Inspection
[05/30/16-11:53:18] *********************************************
[05/30/16-11:53:18] Network Inspection System service starting.
[05/30/16-11:53:18] Version: 4.8.10240.16384
[05/30/16-11:53:18] *********************************************
[05/30/16-11:53:18] Service started by NisIpsPlugin
[05/30/16-11:53:18] Service started
[05/30/16-11:53:19] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/30/16-11:53:19] Win8+: overriding fZeroDayEnabled to FALSE
[05/30/16-11:53:19] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-11:53:19] --Signature list start--
[05/30/16-11:53:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-11:53:19] --Signature list end--
[05/30/16-11:53:19] Signatures: Total: 144;  Enabled: 142
[05/30/16-11:53:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-11:53:19] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-11:53:19] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/30/16-11:53:19] At least one signature is active
[05/30/16-11:53:19] Connecting to the driver
[05/30/16-11:53:19] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/30/16-11:53:19] Load Definitions completed successfully.
[05/30/16-15:48:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-15:48:49] --Signature list start--
[05/30/16-15:48:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:48:49] --Signature list end--
[05/30/16-15:48:49] Signatures: Total: 144;  Enabled: 142
[05/30/16-15:48:49] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-15:48:49] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-15:58:52] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-15:58:53] --Signature list start--
[05/30/16-15:58:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-15:58:53] --Signature list end--
[05/30/16-15:58:53] Signatures: Total: 144;  Enabled: 142
[05/30/16-15:58:53] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-15:58:53] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-18:32:31] *********************************************
[05/30/16-18:32:31] Network Inspection System service starting.
[05/30/16-18:32:31] Version: 4.8.10240.16384
[05/30/16-18:32:31] *********************************************
[05/30/16-18:32:31] Service started by NisIpsPlugin
[05/30/16-18:32:31] Service started
[05/30/16-18:32:31] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/30/16-18:32:31] Win8+: overriding fZeroDayEnabled to FALSE
[05/30/16-18:32:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-18:32:32] --Signature list start--
[05/30/16-18:32:32] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:32:32] --Signature list end--
[05/30/16-18:32:32] Signatures: Total: 144;  Enabled: 142
[05/30/16-18:32:32] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-18:32:32] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-18:32:32] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/30/16-18:32:32] At least one signature is active
[05/30/16-18:32:32] Connecting to the driver
[05/30/16-18:32:32] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/30/16-18:32:32] Load Definitions completed successfully.
[05/30/16-18:53:54] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-18:53:55] --Signature list start--
[05/30/16-18:53:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-18:53:55] --Signature list end--
[05/30/16-18:53:55] Signatures: Total: 144;  Enabled: 142
[05/30/16-18:53:55] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-18:53:55] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-19:09:44] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-19:09:44] --Signature list start--
[05/30/16-19:09:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:09:44] --Signature list end--
[05/30/16-19:09:44] Signatures: Total: 144;  Enabled: 142
[05/30/16-19:09:44] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-19:09:44] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-19:34:14] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-19:34:15] --Signature list start--
[05/30/16-19:34:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:34:15] --Signature list end--
[05/30/16-19:34:15] Signatures: Total: 144;  Enabled: 142
[05/30/16-19:34:15] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-19:34:15] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-19:40:22] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-19:40:22] --Signature list start--
[05/30/16-19:40:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:40:22] --Signature list end--
[05/30/16-19:40:22] Signatures: Total: 144;  Enabled: 142
[05/30/16-19:40:22] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-19:40:22] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-19:48:57] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-19:48:58] --Signature list start--
[05/30/16-19:48:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:48:58] --Signature list end--
[05/30/16-19:48:58] Signatures: Total: 144;  Enabled: 142
[05/30/16-19:48:58] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-19:48:58] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-19:54:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-19:54:26] --Signature list start--
[05/30/16-19:54:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-19:54:26] --Signature list end--
[05/30/16-19:54:26] Signatures: Total: 144;  Enabled: 142
[05/30/16-19:54:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-19:54:26] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-20:01:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-20:01:08] --Signature list start--
[05/30/16-20:01:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:01:08] --Signature list end--
[05/30/16-20:01:08] Signatures: Total: 144;  Enabled: 142
[05/30/16-20:01:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-20:01:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-20:14:27] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-20:14:28] --Signature list start--
[05/30/16-20:14:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:14:28] --Signature list end--
[05/30/16-20:14:28] Signatures: Total: 144;  Enabled: 142
[05/30/16-20:14:28] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-20:14:28] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-20:25:21] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-20:25:21] --Signature list start--
[05/30/16-20:25:21] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:25:21] --Signature list end--
[05/30/16-20:25:21] Signatures: Total: 144;  Enabled: 142
[05/30/16-20:25:21] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-20:25:21] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-20:34:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-20:34:19] --Signature list start--
[05/30/16-20:34:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:34:19] --Signature list end--
[05/30/16-20:34:19] Signatures: Total: 144;  Enabled: 142
[05/30/16-20:34:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-20:34:19] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-20:43:57] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-20:43:58] --Signature list start--
[05/30/16-20:43:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:43:58] --Signature list end--
[05/30/16-20:43:58] Signatures: Total: 144;  Enabled: 142
[05/30/16-20:43:58] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-20:43:58] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-20:54:30] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-20:54:31] --Signature list start--
[05/30/16-20:54:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-20:54:31] --Signature list end--
[05/30/16-20:54:31] Signatures: Total: 144;  Enabled: 142
[05/30/16-20:54:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-20:54:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-21:04:07] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-21:04:08] --Signature list start--
[05/30/16-21:04:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:04:08] --Signature list end--
[05/30/16-21:04:08] Signatures: Total: 144;  Enabled: 142
[05/30/16-21:04:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-21:04:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-21:26:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-21:26:48] --Signature list start--
[05/30/16-21:26:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:26:48] --Signature list end--
[05/30/16-21:26:48] Signatures: Total: 144;  Enabled: 142
[05/30/16-21:26:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-21:26:48] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-21:34:19] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-21:34:19] --Signature list start--
[05/30/16-21:34:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:34:19] --Signature list end--
[05/30/16-21:34:19] Signatures: Total: 144;  Enabled: 142
[05/30/16-21:34:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-21:34:19] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-21:46:45] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-21:46:46] --Signature list start--
[05/30/16-21:46:46] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-21:46:46] --Signature list end--
[05/30/16-21:46:46] Signatures: Total: 144;  Enabled: 142
[05/30/16-21:46:46] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-21:46:46] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-22:04:15] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-22:04:16] --Signature list start--
[05/30/16-22:04:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:04:16] --Signature list end--
[05/30/16-22:04:16] Signatures: Total: 144;  Enabled: 142
[05/30/16-22:04:16] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-22:04:16] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-22:09:38] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-22:09:38] --Signature list start--
[05/30/16-22:09:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:09:38] --Signature list end--
[05/30/16-22:09:38] Signatures: Total: 144;  Enabled: 142
[05/30/16-22:09:38] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-22:09:38] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-22:15:10] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-22:15:11] --Signature list start--
[05/30/16-22:15:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:15:11] --Signature list end--
[05/30/16-22:15:11] Signatures: Total: 144;  Enabled: 142
[05/30/16-22:15:11] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-22:15:11] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-22:34:19] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-22:34:19] --Signature list start--
[05/30/16-22:34:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:34:19] --Signature list end--
[05/30/16-22:34:19] Signatures: Total: 144;  Enabled: 142
[05/30/16-22:34:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-22:34:19] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-22:49:21] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-22:49:22] --Signature list start--
[05/30/16-22:49:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-22:49:22] --Signature list end--
[05/30/16-22:49:22] Signatures: Total: 144;  Enabled: 142
[05/30/16-22:49:22] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-22:49:22] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-23:04:23] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-23:04:24] --Signature list start--
[05/30/16-23:04:24] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:04:24] --Signature list end--
[05/30/16-23:04:24] Signatures: Total: 144;  Enabled: 142
[05/30/16-23:04:24] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-23:04:24] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-23:09:43] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-23:09:43] --Signature list start--
[05/30/16-23:09:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:09:43] --Signature list end--
[05/30/16-23:09:43] Signatures: Total: 144;  Enabled: 142
[05/30/16-23:09:43] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-23:09:43] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-23:15:33] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-23:15:34] --Signature list start--
[05/30/16-23:15:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:15:34] --Signature list end--
[05/30/16-23:15:34] Signatures: Total: 144;  Enabled: 142
[05/30/16-23:15:34] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-23:15:34] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-23:24:47] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-23:24:48] --Signature list start--
[05/30/16-23:24:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:24:48] --Signature list end--
[05/30/16-23:24:48] Signatures: Total: 144;  Enabled: 142
[05/30/16-23:24:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-23:24:48] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-23:34:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-23:34:18] --Signature list start--
[05/30/16-23:34:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:34:18] --Signature list end--
[05/30/16-23:34:18] Signatures: Total: 144;  Enabled: 142
[05/30/16-23:34:18] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-23:34:18] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-23:46:45] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-23:46:46] --Signature list start--
[05/30/16-23:46:46] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:46:46] --Signature list end--
[05/30/16-23:46:46] Signatures: Total: 144;  Enabled: 142
[05/30/16-23:46:46] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-23:46:46] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/30/16-23:55:36] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/30/16-23:55:37] --Signature list start--
[05/30/16-23:55:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/30/16-23:55:37] --Signature list end--
[05/30/16-23:55:37] Signatures: Total: 144;  Enabled: 142
[05/30/16-23:55:37] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/30/16-23:55:37] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-00:04:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-00:04:31] --Signature list start--
[05/31/16-00:04:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:04:31] --Signature list end--
[05/31/16-00:04:31] Signatures: Total: 144;  Enabled: 142
[05/31/16-00:04:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-00:04:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-00:15:46] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-00:15:46] --Signature list start--
[05/31/16-00:15:46] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:15:46] --Signature list end--
[05/31/16-00:15:46] Signatures: Total: 144;  Enabled: 142
[05/31/16-00:15:46] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-00:15:46] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-00:34:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-00:34:18] --Signature list start--
[05/31/16-00:34:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:34:18] --Signature list end--
[05/31/16-00:34:18] Signatures: Total: 144;  Enabled: 142
[05/31/16-00:34:18] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-00:34:18] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-00:46:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-00:46:48] --Signature list start--
[05/31/16-00:46:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:46:48] --Signature list end--
[05/31/16-00:46:48] Signatures: Total: 144;  Enabled: 142
[05/31/16-00:46:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-00:46:48] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-00:56:06] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-00:56:06] --Signature list start--
[05/31/16-00:56:06] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-00:56:06] --Signature list end--
[05/31/16-00:56:06] Signatures: Total: 144;  Enabled: 142
[05/31/16-00:56:06] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-00:56:06] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-01:09:43] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-01:09:43] --Signature list start--
[05/31/16-01:09:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:09:43] --Signature list end--
[05/31/16-01:09:43] Signatures: Total: 144;  Enabled: 142
[05/31/16-01:09:43] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-01:09:43] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-01:34:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-01:34:18] --Signature list start--
[05/31/16-01:34:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:34:18] --Signature list end--
[05/31/16-01:34:18] Signatures: Total: 144;  Enabled: 142
[05/31/16-01:34:18] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-01:34:18] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-01:43:47] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-01:43:48] --Signature list start--
[05/31/16-01:43:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:43:48] --Signature list end--
[05/31/16-01:43:48] Signatures: Total: 144;  Enabled: 142
[05/31/16-01:43:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-01:43:48] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-01:49:45] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-01:49:45] --Signature list start--
[05/31/16-01:49:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:49:45] --Signature list end--
[05/31/16-01:49:45] Signatures: Total: 144;  Enabled: 142
[05/31/16-01:49:45] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-01:49:45] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-01:56:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-01:56:29] --Signature list start--
[05/31/16-01:56:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-01:56:29] --Signature list end--
[05/31/16-01:56:29] Signatures: Total: 144;  Enabled: 142
[05/31/16-01:56:29] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-01:56:29] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-02:04:47] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-02:04:47] --Signature list start--
[05/31/16-02:04:47] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:04:47] --Signature list end--
[05/31/16-02:04:47] Signatures: Total: 144;  Enabled: 142
[05/31/16-02:04:47] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-02:04:47] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-02:16:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-02:16:31] --Signature list start--
[05/31/16-02:16:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:16:31] --Signature list end--
[05/31/16-02:16:31] Signatures: Total: 144;  Enabled: 142
[05/31/16-02:16:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-02:16:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-02:34:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-02:34:18] --Signature list start--
[05/31/16-02:34:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:34:18] --Signature list end--
[05/31/16-02:34:18] Signatures: Total: 144;  Enabled: 142
[05/31/16-02:34:18] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-02:34:18] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-02:49:53] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-02:49:53] --Signature list start--
[05/31/16-02:49:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:49:53] --Signature list end--
[05/31/16-02:49:53] Signatures: Total: 144;  Enabled: 142
[05/31/16-02:49:53] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-02:49:53] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-02:56:35] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-02:56:35] --Signature list start--
[05/31/16-02:56:35] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-02:56:35] --Signature list end--
[05/31/16-02:56:35] Signatures: Total: 144;  Enabled: 142
[05/31/16-02:56:35] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-02:56:35] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-03:04:55] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-03:04:55] --Signature list start--
[05/31/16-03:04:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:04:55] --Signature list end--
[05/31/16-03:04:55] Signatures: Total: 144;  Enabled: 142
[05/31/16-03:04:55] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-03:04:55] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-03:16:37] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-03:16:37] --Signature list start--
[05/31/16-03:16:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:16:37] --Signature list end--
[05/31/16-03:16:37] Signatures: Total: 144;  Enabled: 142
[05/31/16-03:16:37] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-03:16:37] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-03:31:50] *********************************************
[05/31/16-03:31:50] Network Inspection System service starting.
[05/31/16-03:31:50] Version: 4.8.10240.16384
[05/31/16-03:31:50] *********************************************
[05/31/16-03:31:50] Service started by NisIpsPlugin
[05/31/16-03:31:50] Service started
[05/31/16-03:31:51] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/31/16-03:31:51] Win8+: overriding fZeroDayEnabled to FALSE
[05/31/16-03:31:51] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-03:31:51] --Signature list start--
[05/31/16-03:31:51] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:31:51] --Signature list end--
[05/31/16-03:31:51] Signatures: Total: 144;  Enabled: 142
[05/31/16-03:31:51] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-03:31:51] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-03:31:51] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/31/16-03:31:51] At least one signature is active
[05/31/16-03:31:51] Connecting to the driver
[05/31/16-03:31:51] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/31/16-03:31:51] Load Definitions completed successfully.
[05/31/16-03:46:45] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-03:46:45] --Signature list start--
[05/31/16-03:46:45] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-03:46:45] --Signature list end--
[05/31/16-03:46:45] Signatures: Total: 144;  Enabled: 142
[05/31/16-03:46:45] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-03:46:45] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-04:04:34] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-04:04:37] --Signature list start--
[05/31/16-04:04:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:04:37] --Signature list end--
[05/31/16-04:04:37] Signatures: Total: 144;  Enabled: 142
[05/31/16-04:04:37] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-04:04:37] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-04:21:35] *********************************************
[05/31/16-04:21:35] Network Inspection System service starting.
[05/31/16-04:21:35] Version: 4.8.10240.16384
[05/31/16-04:21:35] *********************************************
[05/31/16-04:21:35] Service started by NisIpsPlugin
[05/31/16-04:21:35] Service started
[05/31/16-04:21:36] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/31/16-04:21:36] Win8+: overriding fZeroDayEnabled to FALSE
[05/31/16-04:21:36] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-04:21:36] --Signature list start--
[05/31/16-04:21:36] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:21:36] --Signature list end--
[05/31/16-04:21:36] Signatures: Total: 144;  Enabled: 142
[05/31/16-04:21:36] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-04:21:36] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-04:21:36] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/31/16-04:21:36] At least one signature is active
[05/31/16-04:21:36] Connecting to the driver
[05/31/16-04:21:36] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/31/16-04:21:36] Load Definitions completed successfully.
[05/31/16-04:54:37] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-04:54:39] --Signature list start--
[05/31/16-04:54:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-04:54:39] --Signature list end--
[05/31/16-04:54:39] Signatures: Total: 144;  Enabled: 142
[05/31/16-04:54:39] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-04:54:39] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-05:11:42] *********************************************
[05/31/16-05:11:42] Network Inspection System service starting.
[05/31/16-05:11:42] Version: 4.8.10240.16384
[05/31/16-05:11:42] *********************************************
[05/31/16-05:11:42] Service started by NisIpsPlugin
[05/31/16-05:11:42] Service started
[05/31/16-05:11:42] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[05/31/16-05:11:42] Win8+: overriding fZeroDayEnabled to FALSE
[05/31/16-05:11:42] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-05:11:43] --Signature list start--
[05/31/16-05:11:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-05:11:43] --Signature list end--
[05/31/16-05:11:43] Signatures: Total: 144;  Enabled: 142
[05/31/16-05:11:43] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-05:11:43] New engine version=2.1.12706.0; New signature version=116.3.0.0
[05/31/16-05:11:43] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[05/31/16-05:11:43] At least one signature is active
[05/31/16-05:11:43] Connecting to the driver
[05/31/16-05:11:43] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[05/31/16-05:11:43] Load Definitions completed successfully.
[05/31/16-08:42:13] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[05/31/16-08:42:14] --Signature list start--
[05/31/16-08:42:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[05/31/16-08:42:14] --Signature list end--
[05/31/16-08:42:14] Signatures: Total: 144;  Enabled: 142
[05/31/16-08:42:14] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[05/31/16-08:42:14] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-14:06:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-14:06:09] --Signature list start--
[06/02/16-14:06:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:06:09] --Signature list end--
[06/02/16-14:06:09] Signatures: Total: 144;  Enabled: 142
[06/02/16-14:06:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-14:06:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-14:34:38] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-14:34:38] --Signature list start--
[06/02/16-14:34:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:34:38] --Signature list end--
[06/02/16-14:34:38] Signatures: Total: 144;  Enabled: 142
[06/02/16-14:34:38] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-14:34:38] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-14:47:15] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-14:47:15] --Signature list start--
[06/02/16-14:47:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:47:15] --Signature list end--
[06/02/16-14:47:15] Signatures: Total: 144;  Enabled: 142
[06/02/16-14:47:15] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-14:47:15] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-14:54:24] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-14:54:24] --Signature list start--
[06/02/16-14:54:24] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-14:54:24] --Signature list end--
[06/02/16-14:54:24] Signatures: Total: 144;  Enabled: 142
[06/02/16-14:54:24] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-14:54:24] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-15:09:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-15:09:29] --Signature list start--
[06/02/16-15:09:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:09:29] --Signature list end--
[06/02/16-15:09:29] Signatures: Total: 144;  Enabled: 142
[06/02/16-15:09:29] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-15:09:29] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-15:14:58] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-15:14:58] --Signature list start--
[06/02/16-15:14:58] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:14:58] --Signature list end--
[06/02/16-15:14:58] Signatures: Total: 144;  Enabled: 142
[06/02/16-15:14:58] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-15:14:58] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-15:21:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-15:21:19] --Signature list start--
[06/02/16-15:21:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:21:19] --Signature list end--
[06/02/16-15:21:19] Signatures: Total: 144;  Enabled: 142
[06/02/16-15:21:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-15:21:19] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-15:35:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-15:35:08] --Signature list start--
[06/02/16-15:35:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:35:08] --Signature list end--
[06/02/16-15:35:08] Signatures: Total: 144;  Enabled: 142
[06/02/16-15:35:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-15:35:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-15:44:59] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-15:44:59] --Signature list start--
[06/02/16-15:44:59] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:44:59] --Signature list end--
[06/02/16-15:44:59] Signatures: Total: 144;  Enabled: 142
[06/02/16-15:44:59] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-15:44:59] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-15:54:24] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-15:54:24] --Signature list start--
[06/02/16-15:54:24] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-15:54:24] --Signature list end--
[06/02/16-15:54:24] Signatures: Total: 144;  Enabled: 142
[06/02/16-15:54:24] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-15:54:24] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-16:04:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-16:04:09] --Signature list start--
[06/02/16-16:04:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:04:09] --Signature list end--
[06/02/16-16:04:09] Signatures: Total: 144;  Enabled: 142
[06/02/16-16:04:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-16:04:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-16:15:22] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-16:15:22] --Signature list start--
[06/02/16-16:15:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:15:22] --Signature list end--
[06/02/16-16:15:22] Signatures: Total: 144;  Enabled: 142
[06/02/16-16:15:22] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-16:15:22] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-16:24:39] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-16:24:39] --Signature list start--
[06/02/16-16:24:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:24:39] --Signature list end--
[06/02/16-16:24:39] Signatures: Total: 144;  Enabled: 142
[06/02/16-16:24:39] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-16:24:39] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-16:35:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-16:35:25] --Signature list start--
[06/02/16-16:35:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:35:25] --Signature list end--
[06/02/16-16:35:25] Signatures: Total: 144;  Enabled: 142
[06/02/16-16:35:25] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-16:35:25] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-16:46:58] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-16:46:59] --Signature list start--
[06/02/16-16:46:59] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:46:59] --Signature list end--
[06/02/16-16:46:59] Signatures: Total: 144;  Enabled: 142
[06/02/16-16:46:59] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-16:46:59] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-16:54:24] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-16:54:25] --Signature list start--
[06/02/16-16:54:25] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-16:54:25] --Signature list end--
[06/02/16-16:54:25] Signatures: Total: 144;  Enabled: 142
[06/02/16-16:54:25] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-16:54:25] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-19:02:54] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-19:02:54] --Signature list start--
[06/02/16-19:02:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:02:54] --Signature list end--
[06/02/16-19:02:54] Signatures: Total: 144;  Enabled: 142
[06/02/16-19:02:54] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-19:02:54] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-19:22:09] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-19:22:09] --Signature list start--
[06/02/16-19:22:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:22:09] --Signature list end--
[06/02/16-19:22:09] Signatures: Total: 144;  Enabled: 142
[06/02/16-19:22:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-19:22:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-19:33:01] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-19:33:01] --Signature list start--
[06/02/16-19:33:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:33:01] --Signature list end--
[06/02/16-19:33:01] Signatures: Total: 144;  Enabled: 142
[06/02/16-19:33:01] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-19:33:01] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-19:53:03] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-19:53:03] --Signature list start--
[06/02/16-19:53:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-19:53:03] --Signature list end--
[06/02/16-19:53:03] Signatures: Total: 144;  Enabled: 142
[06/02/16-19:53:03] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-19:53:03] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-20:07:15] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-20:07:15] --Signature list start--
[06/02/16-20:07:15] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:07:15] --Signature list end--
[06/02/16-20:07:15] Signatures: Total: 144;  Enabled: 142
[06/02/16-20:07:15] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-20:07:15] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-20:13:05] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-20:13:05] --Signature list start--
[06/02/16-20:13:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:13:05] --Signature list end--
[06/02/16-20:13:05] Signatures: Total: 144;  Enabled: 142
[06/02/16-20:13:05] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-20:13:05] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-20:18:52] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-20:18:53] --Signature list start--
[06/02/16-20:18:53] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:18:53] --Signature list end--
[06/02/16-20:18:53] Signatures: Total: 144;  Enabled: 142
[06/02/16-20:18:53] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-20:18:53] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-20:33:07] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-20:33:07] --Signature list start--
[06/02/16-20:33:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:33:07] --Signature list end--
[06/02/16-20:33:07] Signatures: Total: 144;  Enabled: 142
[06/02/16-20:33:07] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-20:33:07] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-20:53:09] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-20:53:09] --Signature list start--
[06/02/16-20:53:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-20:53:09] --Signature list end--
[06/02/16-20:53:09] Signatures: Total: 144;  Enabled: 142
[06/02/16-20:53:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-20:53:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-21:01:42] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-21:01:43] --Signature list start--
[06/02/16-21:01:43] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:01:43] --Signature list end--
[06/02/16-21:01:43] Signatures: Total: 144;  Enabled: 142
[06/02/16-21:01:43] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-21:01:43] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-21:33:14] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-21:33:14] --Signature list start--
[06/02/16-21:33:14] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:33:14] --Signature list end--
[06/02/16-21:33:14] Signatures: Total: 144;  Enabled: 142
[06/02/16-21:33:14] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-21:33:14] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-21:44:32] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-21:44:33] --Signature list start--
[06/02/16-21:44:33] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:44:33] --Signature list end--
[06/02/16-21:44:33] Signatures: Total: 144;  Enabled: 142
[06/02/16-21:44:33] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-21:44:33] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-21:53:12] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-21:53:13] --Signature list start--
[06/02/16-21:53:13] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-21:53:13] --Signature list end--
[06/02/16-21:53:13] Signatures: Total: 144;  Enabled: 142
[06/02/16-21:53:13] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-21:53:13] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-22:07:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-22:07:31] --Signature list start--
[06/02/16-22:07:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:07:31] --Signature list end--
[06/02/16-22:07:31] Signatures: Total: 144;  Enabled: 142
[06/02/16-22:07:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-22:07:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-22:13:18] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-22:13:18] --Signature list start--
[06/02/16-22:13:18] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:13:18] --Signature list end--
[06/02/16-22:13:18] Signatures: Total: 144;  Enabled: 142
[06/02/16-22:13:18] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-22:13:18] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-22:22:16] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-22:22:16] --Signature list start--
[06/02/16-22:22:16] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-22:22:16] --Signature list end--
[06/02/16-22:22:16] Signatures: Total: 144;  Enabled: 142
[06/02/16-22:22:16] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-22:22:16] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-23:03:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-23:03:09] --Signature list start--
[06/02/16-23:03:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:03:09] --Signature list end--
[06/02/16-23:03:09] Signatures: Total: 144;  Enabled: 142
[06/02/16-23:03:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-23:03:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-23:20:07] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-23:20:08] --Signature list start--
[06/02/16-23:20:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:20:08] --Signature list end--
[06/02/16-23:20:08] Signatures: Total: 144;  Enabled: 142
[06/02/16-23:20:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-23:20:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-23:33:26] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-23:33:26] --Signature list start--
[06/02/16-23:33:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:33:26] --Signature list end--
[06/02/16-23:33:26] Signatures: Total: 144;  Enabled: 142
[06/02/16-23:33:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-23:33:26] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/02/16-23:53:02] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/02/16-23:53:03] --Signature list start--
[06/02/16-23:53:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/02/16-23:53:03] --Signature list end--
[06/02/16-23:53:03] Signatures: Total: 144;  Enabled: 142
[06/02/16-23:53:03] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/02/16-23:53:03] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/03/16-10:57:38] *********************************************
[06/03/16-10:57:38] Network Inspection System service starting.
[06/03/16-10:57:38] Version: 4.8.10240.16384
[06/03/16-10:57:38] *********************************************
[06/03/16-10:57:38] Service started by NisIpsPlugin
[06/03/16-10:57:38] Service started
[06/03/16-10:57:55] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[06/03/16-10:57:55] Win8+: overriding fZeroDayEnabled to FALSE
[06/03/16-10:57:55] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/03/16-10:57:56] --Signature list start--
[06/03/16-10:57:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/03/16-10:57:56] --Signature list end--
[06/03/16-10:57:56] Signatures: Total: 144;  Enabled: 142
[06/03/16-10:57:56] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/03/16-10:57:56] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/03/16-10:57:56] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[06/03/16-10:57:56] At least one signature is active
[06/03/16-10:57:56] Connecting to the driver
[06/03/16-10:57:56] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[06/03/16-10:57:56] Load Definitions completed successfully.
[06/04/16-11:56:44] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-11:56:44] --Signature list start--
[06/04/16-11:56:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-11:56:44] --Signature list end--
[06/04/16-11:56:44] Signatures: Total: 144;  Enabled: 142
[06/04/16-11:56:44] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-11:56:44] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/04/16-12:06:40] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-12:06:40] --Signature list start--
[06/04/16-12:06:40] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:06:40] --Signature list end--
[06/04/16-12:06:40] Signatures: Total: 144;  Enabled: 142
[06/04/16-12:06:40] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-12:06:40] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/04/16-12:16:54] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-12:16:54] --Signature list start--
[06/04/16-12:16:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:16:54] --Signature list end--
[06/04/16-12:16:54] Signatures: Total: 144;  Enabled: 142
[06/04/16-12:16:54] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-12:16:54] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/04/16-12:47:40] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-12:47:41] --Signature list start--
[06/04/16-12:47:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:47:41] --Signature list end--
[06/04/16-12:47:41] Signatures: Total: 144;  Enabled: 142
[06/04/16-12:47:41] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-12:47:41] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/04/16-12:57:52] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-12:57:52] --Signature list start--
[06/04/16-12:57:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-12:57:52] --Signature list end--
[06/04/16-12:57:52] Signatures: Total: 144;  Enabled: 142
[06/04/16-12:57:52] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-12:57:52] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/04/16-13:35:03] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-13:35:03] --Signature list start--
[06/04/16-13:35:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:35:03] --Signature list end--
[06/04/16-13:35:03] Signatures: Total: 144;  Enabled: 142
[06/04/16-13:35:03] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-13:35:03] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/04/16-13:58:22] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-13:58:22] --Signature list start--
[06/04/16-13:58:22] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-13:58:22] --Signature list end--
[06/04/16-13:58:22] Signatures: Total: 144;  Enabled: 142
[06/04/16-13:58:22] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-13:58:22] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/04/16-14:07:34] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/04/16-14:07:34] --Signature list start--
[06/04/16-14:07:34] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/04/16-14:07:34] --Signature list end--
[06/04/16-14:07:34] Signatures: Total: 144;  Enabled: 142
[06/04/16-14:07:34] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/04/16-14:07:34] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-14:05:36] *********************************************
[06/06/16-14:05:36] Network Inspection System service starting.
[06/06/16-14:05:36] Version: 4.8.10240.16384
[06/06/16-14:05:36] *********************************************
[06/06/16-14:05:36] Service started by NisIpsPlugin
[06/06/16-14:05:36] Service started
[06/06/16-14:05:36] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E}
[06/06/16-14:05:36] Win8+: overriding fZeroDayEnabled to FALSE
[06/06/16-14:05:36] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-14:05:36] --Signature list start--
[06/06/16-14:05:36] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:05:36] --Signature list end--
[06/06/16-14:05:36] Signatures: Total: 144;  Enabled: 142
[06/06/16-14:05:36] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-14:05:36] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-14:05:36] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1
[06/06/16-14:05:36] At least one signature is active
[06/06/16-14:05:36] Connecting to the driver
[06/06/16-14:05:36] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12
[06/06/16-14:05:36] Load Definitions completed successfully.
[06/06/16-14:46:38] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-14:46:38] --Signature list start--
[06/06/16-14:46:38] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-14:46:38] --Signature list end--
[06/06/16-14:46:38] Signatures: Total: 144;  Enabled: 142
[06/06/16-14:46:38] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-14:46:38] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-15:06:59] Parse error - Cancel Inspection
[06/06/16-15:06:59] Parse error - Cancel Inspection
[06/06/16-16:16:26] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-16:16:26] --Signature list start--
[06/06/16-16:16:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-16:16:26] --Signature list end--
[06/06/16-16:16:26] Signatures: Total: 144;  Enabled: 142
[06/06/16-16:16:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-16:16:26] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-20:28:41] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-20:28:41] --Signature list start--
[06/06/16-20:28:41] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:28:41] --Signature list end--
[06/06/16-20:28:41] Signatures: Total: 144;  Enabled: 142
[06/06/16-20:28:41] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-20:28:41] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-20:48:09] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-20:48:10] --Signature list start--
[06/06/16-20:48:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-20:48:10] --Signature list end--
[06/06/16-20:48:10] Signatures: Total: 144;  Enabled: 142
[06/06/16-20:48:10] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-20:48:10] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-21:05:30] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-21:05:30] --Signature list start--
[06/06/16-21:05:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:05:30] --Signature list end--
[06/06/16-21:05:30] Signatures: Total: 144;  Enabled: 142
[06/06/16-21:05:30] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-21:05:30] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-21:16:11] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-21:16:11] --Signature list start--
[06/06/16-21:16:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:16:11] --Signature list end--
[06/06/16-21:16:11] Signatures: Total: 144;  Enabled: 142
[06/06/16-21:16:11] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-21:16:11] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-21:29:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-21:29:09] --Signature list start--
[06/06/16-21:29:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:29:09] --Signature list end--
[06/06/16-21:29:09] Signatures: Total: 144;  Enabled: 142
[06/06/16-21:29:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-21:29:09] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-21:35:30] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-21:35:31] --Signature list start--
[06/06/16-21:35:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-21:35:31] --Signature list end--
[06/06/16-21:35:31] Signatures: Total: 144;  Enabled: 142
[06/06/16-21:35:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-21:35:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-22:05:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-22:05:31] --Signature list start--
[06/06/16-22:05:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:05:31] --Signature list end--
[06/06/16-22:05:31] Signatures: Total: 144;  Enabled: 142
[06/06/16-22:05:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-22:05:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-22:29:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-22:29:00] --Signature list start--
[06/06/16-22:29:00] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:29:00] --Signature list end--
[06/06/16-22:29:00] Signatures: Total: 144;  Enabled: 142
[06/06/16-22:29:00] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-22:29:00] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-22:48:10] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-22:48:11] --Signature list start--
[06/06/16-22:48:11] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-22:48:11] --Signature list end--
[06/06/16-22:48:11] Signatures: Total: 144;  Enabled: 142
[06/06/16-22:48:11] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-22:48:11] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/06/16-23:59:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/06/16-23:59:01] --Signature list start--
[06/06/16-23:59:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/06/16-23:59:01] --Signature list end--
[06/06/16-23:59:01] Signatures: Total: 144;  Enabled: 142
[06/06/16-23:59:01] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/06/16-23:59:01] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/07/16-00:05:31] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/07/16-00:05:31] --Signature list start--
[06/07/16-00:05:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:05:31] --Signature list end--
[06/07/16-00:05:31] Signatures: Total: 144;  Enabled: 142
[06/07/16-00:05:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/07/16-00:05:31] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/07/16-00:18:07] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/07/16-00:18:08] --Signature list start--
[06/07/16-00:18:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:18:08] --Signature list end--
[06/07/16-00:18:08] Signatures: Total: 144;  Enabled: 142
[06/07/16-00:18:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/07/16-00:18:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/07/16-00:48:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/07/16-00:48:08] --Signature list start--
[06/07/16-00:48:08] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:48:08] --Signature list end--
[06/07/16-00:48:08] Signatures: Total: 144;  Enabled: 142
[06/07/16-00:48:08] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/07/16-00:48:08] New engine version=2.1.12706.0; New signature version=116.3.0.0
[06/07/16-00:59:26] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0
[06/07/16-00:59:27] --Signature list start--
[06/07/16-00:59:27] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - 
[06/07/16-00:59:27] --Signature list end--
[06/07/16-00:59:27] Signatures: Total: 144;  Enabled: 142
[06/07/16-00:59:27] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0
[06/07/16-00:59:27] New engine version=2.1.12706.0; New signature version=116.3.0.0